csaf_redhat - RHSA-2013:0758

RHSA-2013:0758

Vulnerability from csaf_redhat

Published

2013-04-18 18:19

Modified

2025-09-26 03:10

Summary

Red Hat Security Advisory: java-1.6.0-sun security update

Notes

Topic

Updated java-1.6.0-sun packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes several vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page, listed in the References section. (CVE-2013-0401, CVE-2013-1491, CVE-2013-1518, CVE-2013-1537, CVE-2013-1540, CVE-2013-1557, CVE-2013-1558, CVE-2013-1563, CVE-2013-1569, CVE-2013-2383, CVE-2013-2384, CVE-2013-2394, CVE-2013-2417, CVE-2013-2418, CVE-2013-2419, CVE-2013-2420, CVE-2013-2422, CVE-2013-2424, CVE-2013-2429, CVE-2013-2430, CVE-2013-2432, CVE-2013-2433, CVE-2013-2435, CVE-2013-2439, CVE-2013-2440) All users of java-1.6.0-sun are advised to upgrade to these updated packages, which provide Oracle Java 6 Update 45. All running instances of Oracle Java must be restarted for the update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated java-1.6.0-sun packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Oracle Java SE version 6 includes the Oracle Java Runtime Environment and\nthe Oracle Java Software Development Kit.\n\nThis update fixes several vulnerabilities in the Oracle Java Runtime\nEnvironment and the Oracle Java Software Development Kit. Further\ninformation about these flaws can be found on the Oracle Java SE Critical\nPatch Update Advisory page, listed in the References section.\n(CVE-2013-0401, CVE-2013-1491, CVE-2013-1518, CVE-2013-1537, CVE-2013-1540,\nCVE-2013-1557, CVE-2013-1558, CVE-2013-1563, CVE-2013-1569, CVE-2013-2383,\nCVE-2013-2384, CVE-2013-2394, CVE-2013-2417, CVE-2013-2418, CVE-2013-2419,\nCVE-2013-2420, CVE-2013-2422, CVE-2013-2424, CVE-2013-2429, CVE-2013-2430,\nCVE-2013-2432, CVE-2013-2433, CVE-2013-2435, CVE-2013-2439, CVE-2013-2440)\n\nAll users of java-1.6.0-sun are advised to upgrade to these updated\npackages, which provide Oracle Java 6 Update 45. All running instances of\nOracle Java must be restarted for the update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:0758",
        "url": "https://access.redhat.com/errata/RHSA-2013:0758"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
        "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
      },
      {
        "category": "external",
        "summary": "920245",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920245"
      },
      {
        "category": "external",
        "summary": "920248",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920248"
      },
      {
        "category": "external",
        "summary": "952387",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952387"
      },
      {
        "category": "external",
        "summary": "952509",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952509"
      },
      {
        "category": "external",
        "summary": "952521",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952521"
      },
      {
        "category": "external",
        "summary": "952524",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952524"
      },
      {
        "category": "external",
        "summary": "952638",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952638"
      },
      {
        "category": "external",
        "summary": "952640",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952640"
      },
      {
        "category": "external",
        "summary": "952642",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952642"
      },
      {
        "category": "external",
        "summary": "952646",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952646"
      },
      {
        "category": "external",
        "summary": "952648",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952648"
      },
      {
        "category": "external",
        "summary": "952656",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952656"
      },
      {
        "category": "external",
        "summary": "952657",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952657"
      },
      {
        "category": "external",
        "summary": "952708",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952708"
      },
      {
        "category": "external",
        "summary": "952709",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952709"
      },
      {
        "category": "external",
        "summary": "952711",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952711"
      },
      {
        "category": "external",
        "summary": "953166",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953166"
      },
      {
        "category": "external",
        "summary": "953172",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953172"
      },
      {
        "category": "external",
        "summary": "953265",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953265"
      },
      {
        "category": "external",
        "summary": "953267",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953267"
      },
      {
        "category": "external",
        "summary": "953269",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953269"
      },
      {
        "category": "external",
        "summary": "953270",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953270"
      },
      {
        "category": "external",
        "summary": "953273",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953273"
      },
      {
        "category": "external",
        "summary": "953274",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953274"
      },
      {
        "category": "external",
        "summary": "953275",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953275"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0758.json"
      }
    ],
    "title": "Red Hat Security Advisory: java-1.6.0-sun security update",
    "tracking": {
      "current_release_date": "2025-09-26T03:10:08+00:00",
      "generator": {
        "date": "2025-09-26T03:10:08+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2013:0758",
      "initial_release_date": "2013-04-18T18:19:00+00:00",
      "revision_history": [
        {
          "date": "2013-04-18T18:19:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-11-13T10:57:42+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-26T03:10:08+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                  "product_id": "6ComputeNode-Supplementary-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
                  "product_id": "5Server-Supplementary-5.9.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
                "product": {
                  "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_id": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.45-1jpp.1.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
                "product": {
                  "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_id": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.45-1jpp.1.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
                "product": {
                  "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_id": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.45-1jpp.1.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
                "product": {
                  "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_id": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.45-1jpp.1.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
                "product": {
                  "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_id": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.45-1jpp.1.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
                "product": {
                  "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_id": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.45-1jpp.1.el6?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_id": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.45-1jpp.1.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_id": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.45-1jpp.1.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_id": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.45-1jpp.1.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_id": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.45-1jpp.1.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_id": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.45-1jpp.1.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_id": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.45-1jpp.1.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.45-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.45-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.45-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.45-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.45-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.45-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
                "product": {
                  "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_id": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.45-1jpp.1.el5_9?arch=i586\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
                "product": {
                  "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_id": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.45-1jpp.1.el5_9?arch=i586\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
                "product": {
                  "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_id": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.45-1jpp.1.el5_9?arch=i586\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
                "product": {
                  "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_id": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.45-1jpp.1.el5_9?arch=i586\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
                "product": {
                  "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_id": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.45-1jpp.1.el5_9?arch=i586\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
                "product": {
                  "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_id": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.45-1jpp.1.el5_9?arch=i586\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586"
        },
        "product_reference": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586"
        },
        "product_reference": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586"
        },
        "product_reference": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586"
        },
        "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586"
        },
        "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586"
        },
        "product_reference": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686"
        },
        "product_reference": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        },
        "product_reference": "java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-0401",
      "discovery_date": "2013-03-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "920245"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: sun.awt.datatransfer.ClassLoaderObjectInputStream class may incorrectly invoke the system class loader (CanSecWest 2013, AWT, 8009305)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0401"
        },
        {
          "category": "external",
          "summary": "RHBZ#920245",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920245"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0401",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0401"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0401",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0401"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: sun.awt.datatransfer.ClassLoaderObjectInputStream class may incorrectly invoke the system class loader (CanSecWest 2013, AWT, 8009305)"
    },
    {
      "cve": "CVE-2013-1491",
      "discovery_date": "2013-03-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "920248"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified sanbox bypass (CanSecWest 2013, 2D)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1491"
        },
        {
          "category": "external",
          "summary": "RHBZ#920248",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920248"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1491",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1491"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1491",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1491"
        }
      ],
      "release_date": "2013-03-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "JDK: unspecified sanbox bypass (CanSecWest 2013, 2D)"
    },
    {
      "cve": "CVE-2013-1518",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952646"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"missing security restrictions.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: JAXP missing security restrictions (JAXP, 6657673)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1518"
        },
        {
          "category": "external",
          "summary": "RHBZ#952646",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952646"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1518"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: JAXP missing security restrictions (JAXP, 6657673)"
    },
    {
      "cve": "CVE-2013-1537",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952387"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform \"dynamic class downloading\" and execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: remote code loading enabled by default (RMI, 8001040)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1537"
        },
        {
          "category": "external",
          "summary": "RHBZ#952387",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952387"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1537",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1537"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1537",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1537"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: remote code loading enabled by default (RMI, 8001040)"
    },
    {
      "cve": "CVE-2013-1540",
      "discovery_date": "2013-04-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "953166"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2433.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1540"
        },
        {
          "category": "external",
          "summary": "RHBZ#953166",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953166"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1540",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1540"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1540",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1540"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)"
    },
    {
      "cve": "CVE-2013-1557",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952648"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"missing security restrictions\" in the LogStream.setDefaultStream method.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1557"
        },
        {
          "category": "external",
          "summary": "RHBZ#952648",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952648"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1557",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1557"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1557",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1557"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329)"
    },
    {
      "cve": "CVE-2013-1558",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952640"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: java.beans.ThreadGroupContext missing restrictions (Beans, 7200507)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1558"
        },
        {
          "category": "external",
          "summary": "RHBZ#952640",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952640"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1558",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1558"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1558",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1558"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: java.beans.ThreadGroupContext missing restrictions (Beans, 7200507)"
    },
    {
      "cve": "CVE-2013-1563",
      "discovery_date": "2013-04-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "953172"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1563"
        },
        {
          "category": "external",
          "summary": "RHBZ#953172",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953172"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1563",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1563"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1563",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1563"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install)"
    },
    {
      "cve": "CVE-2013-1569",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952711"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"checking of [a] glyph table\" in the International Components for Unicode (ICU) Layout Engine before 51.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004994)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1569"
        },
        {
          "category": "external",
          "summary": "RHBZ#952711",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952711"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1569",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1569"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1569",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1569"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004994)"
    },
    {
      "cve": "CVE-2013-2383",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952708"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"handling of [a] glyph table\" in the International Components for Unicode (ICU) Layout Engine before 51.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2383"
        },
        {
          "category": "external",
          "summary": "RHBZ#952708",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952708"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2383",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2383"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2383",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2383"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986)"
    },
    {
      "cve": "CVE-2013-2384",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952709"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"font layout\" in the International Components for Unicode (ICU) Layout Engine before 51.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004987)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2384"
        },
        {
          "category": "external",
          "summary": "RHBZ#952709",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952709"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2384",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2384"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2384",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2384"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004987)"
    },
    {
      "cve": "CVE-2013-2394",
      "discovery_date": "2013-04-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "953265"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2394"
        },
        {
          "category": "external",
          "summary": "RHBZ#953265",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953265"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2394",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2394"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2394",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2394"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D)"
    },
    {
      "cve": "CVE-2013-2417",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952657"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Network InetAddress serialization information disclosure (Networking, 8000724)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2417"
        },
        {
          "category": "external",
          "summary": "RHBZ#952657",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952657"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2417",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2417"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2417",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2417"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: Network InetAddress serialization information disclosure (Networking, 8000724)"
    },
    {
      "cve": "CVE-2013-2418",
      "discovery_date": "2013-04-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "953267"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2418"
        },
        {
          "category": "external",
          "summary": "RHBZ#953267",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953267"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2418",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2418"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2418",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2418"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)"
    },
    {
      "cve": "CVE-2013-2419",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952656"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"font processing errors\" in the International Components for Unicode (ICU) Layout Engine before 51.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ICU: Layout Engine font processing errors (JDK 2D, 8001031)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2419"
        },
        {
          "category": "external",
          "summary": "RHBZ#952656",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952656"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2419"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "ICU: Layout Engine font processing errors (JDK 2D, 8001031)"
    },
    {
      "cve": "CVE-2013-2420",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952638"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient \"validation of images\" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: image processing vulnerability (2D, 8007617)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2420"
        },
        {
          "category": "external",
          "summary": "RHBZ#952638",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952638"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2420"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: image processing vulnerability (2D, 8007617)"
    },
    {
      "cve": "CVE-2013-2422",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952642"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2422"
        },
        {
          "category": "external",
          "summary": "RHBZ#952642",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952642"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2422",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2422"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2422",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2422"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857)"
    },
    {
      "cve": "CVE-2013-2424",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952509"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient class access checks\" when \"creating new instances\" using MBeanInstantiator.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: MBeanInstantiator insufficient class access checks (JMX, 8006435)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2424"
        },
        {
          "category": "external",
          "summary": "RHBZ#952509",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952509"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2424",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2424"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2424",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2424"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: MBeanInstantiator insufficient class access checks (JMX, 8006435)"
    },
    {
      "cve": "CVE-2013-2429",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952521"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"JPEGImageWriter state corruption\" when using native code, which triggers memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: JPEGImageWriter state corruption (ImageIO, 8007918)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2429"
        },
        {
          "category": "external",
          "summary": "RHBZ#952521",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952521"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2429",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2429"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2429",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2429"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenJDK: JPEGImageWriter state corruption (ImageIO, 8007918)"
    },
    {
      "cve": "CVE-2013-2430",
      "discovery_date": "2013-04-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "952524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"JPEGImageReader state corruption\" when using native code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: JPEGImageReader state corruption (ImageIO, 8007667)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2430"
        },
        {
          "category": "external",
          "summary": "RHBZ#952524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2430",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2430"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2430",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2430"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenJDK: JPEGImageReader state corruption (ImageIO, 8007667)"
    },
    {
      "cve": "CVE-2013-2432",
      "discovery_date": "2013-04-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "953269"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2432"
        },
        {
          "category": "external",
          "summary": "RHBZ#953269",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953269"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2432",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2432"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2432",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2432"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D)"
    },
    {
      "cve": "CVE-2013-2433",
      "discovery_date": "2013-04-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "953270"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2433"
        },
        {
          "category": "external",
          "summary": "RHBZ#953270",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953270"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2433",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2433"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2433",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2433"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)"
    },
    {
      "cve": "CVE-2013-2435",
      "discovery_date": "2013-04-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "953273"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2440.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2435"
        },
        {
          "category": "external",
          "summary": "RHBZ#953273",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953273"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2435",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2435"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2435",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2435"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)"
    },
    {
      "cve": "CVE-2013-2439",
      "discovery_date": "2013-04-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "953274"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2439"
        },
        {
          "category": "external",
          "summary": "RHBZ#953274",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953274"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2439",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2439"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2439",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2439"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.4,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install)"
    },
    {
      "cve": "CVE-2013-2440",
      "discovery_date": "2013-04-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "953275"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2435.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
          "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
          "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2440"
        },
        {
          "category": "external",
          "summary": "RHBZ#953275",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=953275"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2440",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2440"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2440",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2440"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        }
      ],
      "release_date": "2013-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-18T18:19:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0758"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.i586",
            "5Server-Supplementary-5.9.Z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Client-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Server-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-demo-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-devel-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-jdbc-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-plugin-1:1.6.0.45-1jpp.1.el6.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.i686",
            "6Workstation-Supplementary-6.4.z:java-1.6.0-sun-src-1:1.6.0.45-1jpp.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)"
    }
  ]
}

CVE-2013-2424 (GCVE-0-2013-2424)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator.

References

URL

Tags

	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19594	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=952509	x_refsource_MISC
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/da1867780fc9	x_refsource_MISC
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16314	vdb-entry, signature, x_refsource_OVAL
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19656	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/59159	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.408Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:19594",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19594"
          },
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952509"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/da1867780fc9"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:16314",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16314"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19656",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19656"
          },
          {
            "name": "59159",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59159"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient class access checks\" when \"creating new instances\" using MBeanInstantiator."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:19594",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19594"
        },
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952509"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/da1867780fc9"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:16314",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16314"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19656",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19656"
        },
        {
          "name": "59159",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59159"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2424",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient class access checks\" when \"creating new instances\" using MBeanInstantiator."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:19594",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19594"
            },
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952509",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952509"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/da1867780fc9",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/da1867780fc9"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:16314",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16314"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19656",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19656"
            },
            {
              "name": "59159",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59159"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2424",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.408Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-0401 (GCVE-0-2013-0401)

Vulnerability from cvelistv5

Published

2013-03-08 18:00

Modified

2024-08-06 14:25

Severity ?

CWE

Summary

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	https://twitter.com/thezdi/status/309784608508100608	x_refsource_MISC
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16297	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19641	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19463	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.redhat.com/show_bug.cgi?id=920245	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/31c782610044	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T14:25:09.984Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://twitter.com/thezdi/status/309784608508100608"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "oval:org.mitre.oval:def:16297",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16297"
          },
          {
            "name": "oval:org.mitre.oval:def:19641",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19641"
          },
          {
            "name": "oval:org.mitre.oval:def:19463",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19463"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920245"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/31c782610044"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-03-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://twitter.com/thezdi/status/309784608508100608"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "oval:org.mitre.oval:def:16297",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16297"
        },
        {
          "name": "oval:org.mitre.oval:def:19641",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19641"
        },
        {
          "name": "oval:org.mitre.oval:def:19463",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19463"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920245"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/31c782610044"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-0401",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/",
              "refsource": "MISC",
              "url": "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "https://twitter.com/thezdi/status/309784608508100608",
              "refsource": "MISC",
              "url": "https://twitter.com/thezdi/status/309784608508100608"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "oval:org.mitre.oval:def:16297",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16297"
            },
            {
              "name": "oval:org.mitre.oval:def:19641",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19641"
            },
            {
              "name": "oval:org.mitre.oval:def:19463",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19463"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=920245",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920245"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/31c782610044",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/31c782610044"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157",
              "refsource": "MISC",
              "url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-0401",
    "datePublished": "2013-03-08T18:00:00",
    "dateReserved": "2012-12-07T00:00:00",
    "dateUpdated": "2024-08-06T14:25:09.984Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2430 (GCVE-0-2013-2430)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageReader state corruption" when using native code.

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/d868fe7c7618	x_refsource_MISC
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.redhat.com/show_bug.cgi?id=952524	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19715	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/59243	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15708	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19536	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.469Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/d868fe7c7618"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952524"
          },
          {
            "name": "oval:org.mitre.oval:def:19715",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19715"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "59243",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59243"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "name": "oval:org.mitre.oval:def:15708",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15708"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "oval:org.mitre.oval:def:19536",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19536"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"JPEGImageReader state corruption\" when using native code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/d868fe7c7618"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952524"
        },
        {
          "name": "oval:org.mitre.oval:def:19715",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19715"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "59243",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59243"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "name": "oval:org.mitre.oval:def:15708",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15708"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "oval:org.mitre.oval:def:19536",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19536"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2430",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"JPEGImageReader state corruption\" when using native code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/d868fe7c7618",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/d868fe7c7618"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952524",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952524"
            },
            {
              "name": "oval:org.mitre.oval:def:19715",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19715"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "59243",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59243"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "oval:org.mitre.oval:def:15708",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15708"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "oval:org.mitre.oval:def:19536",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19536"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2430",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.469Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2383 (GCVE-0-2013-2383)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.

References

URL

Tags

	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16564	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://site.icu-project.org/download/51#TOC-Known-Issues	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19291	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7	x_refsource_MISC
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/59190	vdb-entry, x_refsource_BID
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19725	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://bugs.icu-project.org/trac/ticket/10107	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=952708	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.476Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:16564",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16564"
          },
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "oval:org.mitre.oval:def:19291",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19291"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "59190",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59190"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "oval:org.mitre.oval:def:19725",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19725"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.icu-project.org/trac/ticket/10107"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952708"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"handling of [a] glyph table\" in the International Components for Unicode (ICU) Layout Engine before 51.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:16564",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16564"
        },
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "oval:org.mitre.oval:def:19291",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19291"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "59190",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59190"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "oval:org.mitre.oval:def:19725",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19725"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.icu-project.org/trac/ticket/10107"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952708"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2383",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"handling of [a] glyph table\" in the International Components for Unicode (ICU) Layout Engine before 51.2."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:16564",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16564"
            },
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "http://site.icu-project.org/download/51#TOC-Known-Issues",
              "refsource": "CONFIRM",
              "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "oval:org.mitre.oval:def:19291",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19291"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "59190",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59190"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "oval:org.mitre.oval:def:19725",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19725"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "http://bugs.icu-project.org/trac/ticket/10107",
              "refsource": "CONFIRM",
              "url": "http://bugs.icu-project.org/trac/ticket/10107"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952708",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952708"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2383",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.476Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2439 (GCVE-0-2013-2439)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19541	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/59178	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19473	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.450Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:19541",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19541"
          },
          {
            "name": "59178",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59178"
          },
          {
            "name": "oval:org.mitre.oval:def:19473",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19473"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:19541",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19541"
        },
        {
          "name": "59178",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59178"
        },
        {
          "name": "oval:org.mitre.oval:def:19473",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19473"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2439",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:19541",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19541"
            },
            {
              "name": "59178",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59178"
            },
            {
              "name": "oval:org.mitre.oval:def:19473",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19473"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2439",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.450Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2418 (GCVE-0-2013-2418)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

References

URL

Tags

	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16444	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19584	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/59145	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.518Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:16444",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16444"
          },
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19584",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19584"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "59145",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59145"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:16444",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16444"
        },
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19584",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19584"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "59145",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59145"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2418",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:16444",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16444"
            },
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19584",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19584"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "59145",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59145"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2418",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.518Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-1518 (GCVE-0-2013-1518)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:04

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions."

References

URL

Tags

	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19451	vdb-entry, signature, x_refsource_OVAL
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxp/rev/38d4d23d167c	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16702	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/59141	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=952646	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19705	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:04:49.470Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "oval:org.mitre.oval:def:19451",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19451"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxp/rev/38d4d23d167c"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "oval:org.mitre.oval:def:16702",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16702"
          },
          {
            "name": "59141",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59141"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952646"
          },
          {
            "name": "oval:org.mitre.oval:def:19705",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19705"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"missing security restrictions.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "oval:org.mitre.oval:def:19451",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19451"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxp/rev/38d4d23d167c"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "oval:org.mitre.oval:def:16702",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16702"
        },
        {
          "name": "59141",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59141"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952646"
        },
        {
          "name": "oval:org.mitre.oval:def:19705",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19705"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-1518",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"missing security restrictions.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "oval:org.mitre.oval:def:19451",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19451"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxp/rev/38d4d23d167c",
              "refsource": "CONFIRM",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxp/rev/38d4d23d167c"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "oval:org.mitre.oval:def:16702",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16702"
            },
            {
              "name": "59141",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59141"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952646",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952646"
            },
            {
              "name": "oval:org.mitre.oval:def:19705",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19705"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-1518",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-01-30T00:00:00",
    "dateUpdated": "2024-08-06T15:04:49.470Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-1569 (GCVE-0-2013-1569)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:04

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.

References

URL

Tags

	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16697	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://site.icu-project.org/download/51#TOC-Known-Issues	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19556	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7	x_refsource_MISC
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/59166	vdb-entry, x_refsource_BID
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://bugs.icu-project.org/trac/ticket/10107	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=952711	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19327	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:04:49.340Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:16697",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16697"
          },
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "oval:org.mitre.oval:def:19556",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19556"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "59166",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59166"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.icu-project.org/trac/ticket/10107"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952711"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19327",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19327"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"checking of [a] glyph table\" in the International Components for Unicode (ICU) Layout Engine before 51.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:16697",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16697"
        },
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "oval:org.mitre.oval:def:19556",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19556"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "59166",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59166"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.icu-project.org/trac/ticket/10107"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952711"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19327",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19327"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-1569",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"checking of [a] glyph table\" in the International Components for Unicode (ICU) Layout Engine before 51.2."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:16697",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16697"
            },
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "http://site.icu-project.org/download/51#TOC-Known-Issues",
              "refsource": "CONFIRM",
              "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "oval:org.mitre.oval:def:19556",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19556"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "59166",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59166"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "http://bugs.icu-project.org/trac/ticket/10107",
              "refsource": "CONFIRM",
              "url": "http://bugs.icu-project.org/trac/ticket/10107"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952711",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952711"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19327",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19327"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-1569",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-01-30T00:00:00",
    "dateUpdated": "2024-08-06T15:04:49.340Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2419 (GCVE-0-2013-2419)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2.

References

URL

Tags

	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16527	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/59131	vdb-entry, x_refsource_BID
	http://site.icu-project.org/download/51#TOC-Known-Issues	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19386	vdb-entry, signature, x_refsource_OVAL
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://bugs.icu-project.org/trac/ticket/10107	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19526	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=952656	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.530Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:16527",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16527"
          },
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "59131",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59131"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:19386",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19386"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.icu-project.org/trac/ticket/10107"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "oval:org.mitre.oval:def:19526",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19526"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952656"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"font processing errors\" in the International Components for Unicode (ICU) Layout Engine before 51.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:16527",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16527"
        },
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "59131",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59131"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:19386",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19386"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.icu-project.org/trac/ticket/10107"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "oval:org.mitre.oval:def:19526",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19526"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952656"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2419",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"font processing errors\" in the International Components for Unicode (ICU) Layout Engine before 51.2."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:16527",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16527"
            },
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "59131",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59131"
            },
            {
              "name": "http://site.icu-project.org/download/51#TOC-Known-Issues",
              "refsource": "CONFIRM",
              "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:19386",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19386"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "http://bugs.icu-project.org/trac/ticket/10107",
              "refsource": "CONFIRM",
              "url": "http://bugs.icu-project.org/trac/ticket/10107"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "oval:org.mitre.oval:def:19526",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19526"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952656",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952656"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2419",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.530Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2384 (GCVE-0-2013-2384)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.

References

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=952709	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://site.icu-project.org/download/51#TOC-Known-Issues	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7	x_refsource_MISC
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19549	vdb-entry, signature, x_refsource_OVAL
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://bugs.icu-project.org/trac/ticket/10107	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16549	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19341	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/59179	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.492Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952709"
          },
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19549",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19549"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.icu-project.org/trac/ticket/10107"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16549",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16549"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "oval:org.mitre.oval:def:19341",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19341"
          },
          {
            "name": "59179",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59179"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"font layout\" in the International Components for Unicode (ICU) Layout Engine before 51.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952709"
        },
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19549",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19549"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.icu-project.org/trac/ticket/10107"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16549",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16549"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "oval:org.mitre.oval:def:19341",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19341"
        },
        {
          "name": "59179",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59179"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2384",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"font layout\" in the International Components for Unicode (ICU) Layout Engine before 51.2."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952709",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952709"
            },
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "http://site.icu-project.org/download/51#TOC-Known-Issues",
              "refsource": "CONFIRM",
              "url": "http://site.icu-project.org/download/51#TOC-Known-Issues"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19549",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19549"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "http://bugs.icu-project.org/trac/ticket/10107",
              "refsource": "CONFIRM",
              "url": "http://bugs.icu-project.org/trac/ticket/10107"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16549",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16549"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "oval:org.mitre.oval:def:19341",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19341"
            },
            {
              "name": "59179",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59179"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2384",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.492Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2432 (GCVE-0-2013-2432)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18914	vdb-entry, signature, x_refsource_OVAL
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/59154	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18850	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16611	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.495Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "oval:org.mitre.oval:def:18914",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18914"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "59154",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59154"
          },
          {
            "name": "oval:org.mitre.oval:def:18850",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18850"
          },
          {
            "name": "oval:org.mitre.oval:def:16611",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16611"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "oval:org.mitre.oval:def:18914",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18914"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "59154",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59154"
        },
        {
          "name": "oval:org.mitre.oval:def:18850",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18850"
        },
        {
          "name": "oval:org.mitre.oval:def:16611",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16611"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2432",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "oval:org.mitre.oval:def:18914",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18914"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "59154",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59154"
            },
            {
              "name": "oval:org.mitre.oval:def:18850",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18850"
            },
            {
              "name": "oval:org.mitre.oval:def:16611",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16611"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2432",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.495Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-1563 (GCVE-0-2013-1563)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:04

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/59208	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19364	vdb-entry, signature, x_refsource_OVAL

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:04:49.304Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "59208",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59208"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:19364",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19364"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "59208",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59208"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:19364",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19364"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-1563",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "59208",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59208"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:19364",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19364"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-1563",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-01-30T00:00:00",
    "dateUpdated": "2024-08-06T15:04:49.304Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2440 (GCVE-0-2013-2440)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2435.

References

URL

Tags

	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19417	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16586	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/59124	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.443Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:19417",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19417"
          },
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16586",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16586"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "59124",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59124"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2435."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:19417",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19417"
        },
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16586",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16586"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "59124",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59124"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2440",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2435."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:19417",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19417"
            },
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16586",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16586"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "59124",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59124"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2440",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.443Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-1491 (GCVE-0-2013-1491)

Vulnerability from cvelistv5

Published

2013-03-08 18:00

Modified

2024-08-06 15:04

Severity ?

CWE

Summary

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.

References

URL

Tags

	https://twitter.com/thezdi/status/309438311112507392	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19553	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16663	vdb-entry, signature, x_refsource_OVAL
	http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19482	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:04:49.213Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://twitter.com/thezdi/status/309438311112507392"
          },
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19553",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19553"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:16663",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16663"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/"
          },
          {
            "name": "oval:org.mitre.oval:def:19482",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19482"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-03-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://twitter.com/thezdi/status/309438311112507392"
        },
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19553",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19553"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:16663",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16663"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/"
        },
        {
          "name": "oval:org.mitre.oval:def:19482",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19482"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-1491",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://twitter.com/thezdi/status/309438311112507392",
              "refsource": "MISC",
              "url": "https://twitter.com/thezdi/status/309438311112507392"
            },
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19553",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19553"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:16663",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16663"
            },
            {
              "name": "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/",
              "refsource": "MISC",
              "url": "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/"
            },
            {
              "name": "oval:org.mitre.oval:def:19482",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19482"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157",
              "refsource": "MISC",
              "url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-1491",
    "datePublished": "2013-03-08T18:00:00",
    "dateReserved": "2013-01-30T00:00:00",
    "dateUpdated": "2024-08-06T15:04:49.213Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2433 (GCVE-0-2013-2433)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540.

References

URL

Tags

	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19577	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19461	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19589	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16454	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/59220	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.447Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:19577",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19577"
          },
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:19461",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19461"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19589",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19589"
          },
          {
            "name": "oval:org.mitre.oval:def:16454",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16454"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "59220",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59220"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:19577",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19577"
        },
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:19461",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19461"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19589",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19589"
        },
        {
          "name": "oval:org.mitre.oval:def:16454",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16454"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "59220",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59220"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2433",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:19577",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19577"
            },
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:19461",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19461"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19589",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19589"
            },
            {
              "name": "oval:org.mitre.oval:def:16454",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16454"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "59220",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59220"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2433",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.447Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-1558 (GCVE-0-2013-1558)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:04

Severity ?

CWE

Summary

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19158	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16543	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/59219	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:04:49.609Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19158",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19158"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "oval:org.mitre.oval:def:16543",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16543"
          },
          {
            "name": "59219",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59219"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19158",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19158"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "oval:org.mitre.oval:def:16543",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16543"
        },
        {
          "name": "59219",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59219"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-1558",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19158",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19158"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "oval:org.mitre.oval:def:16543",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16543"
            },
            {
              "name": "59219",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59219"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-1558",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-01-30T00:00:00",
    "dateUpdated": "2024-08-06T15:04:49.609Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2417 (GCVE-0-2013-2417)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue.

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19570	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19524	vdb-entry, signature, x_refsource_OVAL
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=952657	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/59187	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16446	vdb-entry, signature, x_refsource_OVAL
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/7ca8a40795d8	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.487Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19570",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19570"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19524",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19524"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952657"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "59187",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59187"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16446",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16446"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/7ca8a40795d8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19570",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19570"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19524",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19524"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952657"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "59187",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59187"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16446",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16446"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/7ca8a40795d8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2417",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19570",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19570"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19524",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19524"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952657",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952657"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "59187",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59187"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16446",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16446"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/7ca8a40795d8",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/7ca8a40795d8"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2417",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.487Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-1557 (GCVE-0-2013-1557)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:04

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions" in the LogStream.setDefaultStream method.

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19294	vdb-entry, signature, x_refsource_OVAL
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/76eb3fb80740	x_refsource_MISC
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19672	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://www-01.ibm.com/support/docview.wss?uid=swg1IV40772	vendor-advisory, x_refsource_AIXAPAR
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=952648	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/59170	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://www-01.ibm.com/support/docview.wss?uid=swg21645566	x_refsource_CONFIRM
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16688	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:04:49.478Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19294",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19294"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/76eb3fb80740"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "oval:org.mitre.oval:def:19672",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19672"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "IV40772",
            "tags": [
              "vendor-advisory",
              "x_refsource_AIXAPAR",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV40772"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952648"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "59170",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59170"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21645566"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "oval:org.mitre.oval:def:16688",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16688"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"missing security restrictions\" in the LogStream.setDefaultStream method."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19294",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19294"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/76eb3fb80740"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "oval:org.mitre.oval:def:19672",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19672"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "IV40772",
          "tags": [
            "vendor-advisory",
            "x_refsource_AIXAPAR"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV40772"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952648"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "59170",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59170"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21645566"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "oval:org.mitre.oval:def:16688",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16688"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-1557",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"missing security restrictions\" in the LogStream.setDefaultStream method."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19294",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19294"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/76eb3fb80740",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/76eb3fb80740"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "oval:org.mitre.oval:def:19672",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19672"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "IV40772",
              "refsource": "AIXAPAR",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV40772"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952648",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952648"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "59170",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59170"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21645566",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21645566"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "oval:org.mitre.oval:def:16688",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16688"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-1557",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-01-30T00:00:00",
    "dateUpdated": "2024-08-06T15:04:49.478Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2429 (GCVE-0-2013-2429)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageWriter state corruption" when using native code, which triggers memory corruption.

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19203	vdb-entry, signature, x_refsource_OVAL
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://bugzilla.redhat.com/show_bug.cgi?id=952521	x_refsource_MISC
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19107	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/59184	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/90c9f1577a0b	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.489Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19203",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19203"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952521"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "oval:org.mitre.oval:def:19107",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19107"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "name": "59184",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59184"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/90c9f1577a0b"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"JPEGImageWriter state corruption\" when using native code, which triggers memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19203",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19203"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952521"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "oval:org.mitre.oval:def:19107",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19107"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "name": "59184",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59184"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/90c9f1577a0b"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2429",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"JPEGImageWriter state corruption\" when using native code, which triggers memory corruption."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19203",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19203"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952521",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952521"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "oval:org.mitre.oval:def:19107",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19107"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "59184",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59184"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/90c9f1577a0b",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/90c9f1577a0b"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2429",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.489Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-1537 (GCVE-0-2013-1537)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:04

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code.

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/java/javase/7u21-relnotes-1932873.html#rmichanges	x_refsource_MISC
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://www.security-explorations.com/en/SE-2012-01-details.html	x_refsource_MISC
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/096ed306159f	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16578	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19385	vdb-entry, signature, x_refsource_OVAL
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19550	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/59194	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=952387	x_refsource_MISC
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/f098e2297ff1	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://seclists.org/fulldisclosure/2013/Feb/18	mailing-list, x_refsource_FULLDISC
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:150	vendor-advisory, x_refsource_MANDRIVA
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:04:49.454Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/java/javase/7u21-relnotes-1932873.html#rmichanges"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.security-explorations.com/en/SE-2012-01-details.html"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/096ed306159f"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:16578",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16578"
          },
          {
            "name": "oval:org.mitre.oval:def:19385",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19385"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "oval:org.mitre.oval:def:19550",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19550"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "59194",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59194"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952387"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/f098e2297ff1"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "20130205 Re: [SE-2012-01] Details of issues fixed by Feb\t2013 Java SE CPU",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2013/Feb/18"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "name": "MDVSA-2013:150",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform \"dynamic class downloading\" and execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.oracle.com/technetwork/java/javase/7u21-relnotes-1932873.html#rmichanges"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.security-explorations.com/en/SE-2012-01-details.html"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/096ed306159f"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:16578",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16578"
        },
        {
          "name": "oval:org.mitre.oval:def:19385",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19385"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "oval:org.mitre.oval:def:19550",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19550"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "59194",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59194"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952387"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/f098e2297ff1"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "20130205 Re: [SE-2012-01] Details of issues fixed by Feb\t2013 Java SE CPU",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2013/Feb/18"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "name": "MDVSA-2013:150",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-1537",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform \"dynamic class downloading\" and execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/java/javase/7u21-relnotes-1932873.html#rmichanges",
              "refsource": "MISC",
              "url": "http://www.oracle.com/technetwork/java/javase/7u21-relnotes-1932873.html#rmichanges"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "http://www.security-explorations.com/en/SE-2012-01-details.html",
              "refsource": "MISC",
              "url": "http://www.security-explorations.com/en/SE-2012-01-details.html"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/096ed306159f",
              "refsource": "CONFIRM",
              "url": "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/096ed306159f"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:16578",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16578"
            },
            {
              "name": "oval:org.mitre.oval:def:19385",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19385"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "oval:org.mitre.oval:def:19550",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19550"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "59194",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59194"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952387",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952387"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/f098e2297ff1",
              "refsource": "CONFIRM",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/f098e2297ff1"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "20130205 Re: [SE-2012-01] Details of issues fixed by Feb\t2013 Java SE CPU",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2013/Feb/18"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "MDVSA-2013:150",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-1537",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-01-30T00:00:00",
    "dateUpdated": "2024-08-06T15:04:49.454Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2420 (GCVE-0-2013-2420)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient "validation of images" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets.

References

URL

Tags

	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cf93d3828aa8	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=952638	x_refsource_MISC
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/59167	vdb-entry, x_refsource_BID
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19354	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19704	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16597	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.488Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cf93d3828aa8"
          },
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952638"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "59167",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59167"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19354",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19354"
          },
          {
            "name": "oval:org.mitre.oval:def:19704",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19704"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "oval:org.mitre.oval:def:16597",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16597"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient \"validation of images\" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cf93d3828aa8"
        },
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952638"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "59167",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59167"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19354",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19354"
        },
        {
          "name": "oval:org.mitre.oval:def:19704",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19704"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "oval:org.mitre.oval:def:16597",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16597"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2420",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient \"validation of images\" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cf93d3828aa8",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cf93d3828aa8"
            },
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952638",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952638"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "59167",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59167"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19354",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19354"
            },
            {
              "name": "oval:org.mitre.oval:def:19704",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19704"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "oval:org.mitre.oval:def:16597",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16597"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2420",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.488Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2435 (GCVE-0-2013-2435)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/59089	vdb-entry, x_refsource_BID
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19580	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16213	vdb-entry, signature, x_refsource_OVAL

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.493Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "59089",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59089"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19580",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19580"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:16213",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16213"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2440."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "59089",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59089"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19580",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19580"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:16213",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16213"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2435",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2440."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "59089",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59089"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19580",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19580"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:16213",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16213"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2435",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.493Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2422 (GCVE-0-2013-2422)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox.

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19087	vdb-entry, signature, x_refsource_OVAL
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.redhat.com/show_bug.cgi?id=952642	x_refsource_MISC
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/59228	vdb-entry, x_refsource_BID
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2899c3dbf5e8	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16561	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.483Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19087",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19087"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952642"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "59228",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59228"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2899c3dbf5e8"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16561",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16561"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19087",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19087"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952642"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "59228",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59228"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2899c3dbf5e8"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16561",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16561"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2422",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19087",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19087"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952642",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952642"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "59228",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59228"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2899c3dbf5e8",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2899c3dbf5e8"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16561",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16561"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2422",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.483Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-1540 (GCVE-0-2013-1540)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:04

Severity ?

CWE

Summary

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19567	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/59149	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16333	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:04:49.351Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19567",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19567"
          },
          {
            "name": "59149",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59149"
          },
          {
            "name": "oval:org.mitre.oval:def:16333",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16333"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2433."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19567",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19567"
        },
        {
          "name": "59149",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59149"
        },
        {
          "name": "oval:org.mitre.oval:def:16333",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16333"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-1540",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2433."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19567",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19567"
            },
            {
              "name": "59149",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59149"
            },
            {
              "name": "oval:org.mitre.oval:def:16333",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16333"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-1540",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-01-30T00:00:00",
    "dateUpdated": "2024-08-06T15:04:49.351Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2394 (GCVE-0-2013-2394)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491.

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0758.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.securityfocus.com/bid/59172	vdb-entry, x_refsource_BID
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19500	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19554	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16162	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=137283787217316&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.303Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2013:0835",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
          },
          {
            "name": "SUSE-SU-2013:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
          },
          {
            "name": "RHSA-2013:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "59172",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59172"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "name": "SSRT101252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:19500",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19500"
          },
          {
            "name": "oval:org.mitre.oval:def:19554",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19554"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "name": "SUSE-SU-2013:0934",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16162",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16162"
          },
          {
            "name": "HPSBUX02889",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2013:0835",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
        },
        {
          "name": "SUSE-SU-2013:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
        },
        {
          "name": "RHSA-2013:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "59172",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59172"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "name": "SSRT101252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:19500",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19500"
        },
        {
          "name": "oval:org.mitre.oval:def:19554",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19554"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "name": "SUSE-SU-2013:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16162",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16162"
        },
        {
          "name": "HPSBUX02889",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2394",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2013:0835",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html"
            },
            {
              "name": "SUSE-SU-2013:0871",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html"
            },
            {
              "name": "RHSA-2013:0758",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0758.html"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "59172",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59172"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "SSRT101252",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:19500",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19500"
            },
            {
              "name": "oval:org.mitre.oval:def:19554",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19554"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "SUSE-SU-2013:0934",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16162",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16162"
            },
            {
              "name": "HPSBUX02889",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137283787217316\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2394",
    "datePublished": "2013-04-17T15:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.303Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

RHSA-2013:0758

Vulnerability from csaf_redhat

CVE-2013-2424 (GCVE-0-2013-2424)

Vulnerability from cvelistv5

CVE-2013-0401 (GCVE-0-2013-0401)

Vulnerability from cvelistv5

CVE-2013-2430 (GCVE-0-2013-2430)

Vulnerability from cvelistv5

CVE-2013-2383 (GCVE-0-2013-2383)

Vulnerability from cvelistv5

CVE-2013-2439 (GCVE-0-2013-2439)

Vulnerability from cvelistv5

CVE-2013-2418 (GCVE-0-2013-2418)

Vulnerability from cvelistv5

CVE-2013-1518 (GCVE-0-2013-1518)

Vulnerability from cvelistv5

CVE-2013-1569 (GCVE-0-2013-1569)

Vulnerability from cvelistv5

CVE-2013-2419 (GCVE-0-2013-2419)

Vulnerability from cvelistv5

CVE-2013-2384 (GCVE-0-2013-2384)

Vulnerability from cvelistv5

CVE-2013-2432 (GCVE-0-2013-2432)

Vulnerability from cvelistv5

CVE-2013-1563 (GCVE-0-2013-1563)

Vulnerability from cvelistv5

CVE-2013-2440 (GCVE-0-2013-2440)

Vulnerability from cvelistv5

CVE-2013-1491 (GCVE-0-2013-1491)

Vulnerability from cvelistv5

CVE-2013-2433 (GCVE-0-2013-2433)

Vulnerability from cvelistv5

CVE-2013-1558 (GCVE-0-2013-1558)

Vulnerability from cvelistv5

CVE-2013-2417 (GCVE-0-2013-2417)

Vulnerability from cvelistv5

CVE-2013-1557 (GCVE-0-2013-1557)

Vulnerability from cvelistv5

CVE-2013-2429 (GCVE-0-2013-2429)

Vulnerability from cvelistv5

CVE-2013-1537 (GCVE-0-2013-1537)

Vulnerability from cvelistv5

CVE-2013-2420 (GCVE-0-2013-2420)

Vulnerability from cvelistv5

CVE-2013-2435 (GCVE-0-2013-2435)

Vulnerability from cvelistv5

CVE-2013-2422 (GCVE-0-2013-2422)

Vulnerability from cvelistv5

CVE-2013-1540 (GCVE-0-2013-1540)

Vulnerability from cvelistv5

CVE-2013-2394 (GCVE-0-2013-2394)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature