csaf_redhat - rhsa-2013:0963

rhsa-2013:0963

Vulnerability from csaf_redhat

Published

2013-06-20 14:42

Modified

2025-09-26 03:10

Summary

Red Hat Security Advisory: java-1.7.0-oracle security update

Notes

Topic

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes several vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page, listed in the References section. (CVE-2013-1500, CVE-2013-1571, CVE-2013-2400, CVE-2013-2407, CVE-2013-2412, CVE-2013-2437, CVE-2013-2442, CVE-2013-2443, CVE-2013-2444, CVE-2013-2445, CVE-2013-2446, CVE-2013-2447, CVE-2013-2448, CVE-2013-2449, CVE-2013-2450, CVE-2013-2451, CVE-2013-2452, CVE-2013-2453, CVE-2013-2454, CVE-2013-2455, CVE-2013-2456, CVE-2013-2457, CVE-2013-2458, CVE-2013-2459, CVE-2013-2460, CVE-2013-2461, CVE-2013-2462, CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2466, CVE-2013-2468, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, CVE-2013-2473, CVE-2013-3744) Red Hat would like to thank Tim Brown for reporting CVE-2013-1500, and US-CERT for reporting CVE-2013-1571. US-CERT acknowledges Oracle as the original reporter of CVE-2013-1571. All users of java-1.7.0-oracle are advised to upgrade to these updated packages, which provide Oracle Java 7 Update 25 and resolve these issues. All running instances of Oracle Java must be restarted for the update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated java-1.7.0-oracle packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and\nthe Oracle Java Software Development Kit.\n\nThis update fixes several vulnerabilities in the Oracle Java Runtime\nEnvironment and the Oracle Java Software Development Kit. Further\ninformation about these flaws can be found on the Oracle Java SE Critical\nPatch Update Advisory page, listed in the References section.\n(CVE-2013-1500, CVE-2013-1571, CVE-2013-2400, CVE-2013-2407, CVE-2013-2412,\nCVE-2013-2437, CVE-2013-2442, CVE-2013-2443, CVE-2013-2444, CVE-2013-2445,\nCVE-2013-2446, CVE-2013-2447, CVE-2013-2448, CVE-2013-2449, CVE-2013-2450,\nCVE-2013-2451, CVE-2013-2452, CVE-2013-2453, CVE-2013-2454, CVE-2013-2455,\nCVE-2013-2456, CVE-2013-2457, CVE-2013-2458, CVE-2013-2459, CVE-2013-2460,\nCVE-2013-2461, CVE-2013-2462, CVE-2013-2463, CVE-2013-2464, CVE-2013-2465,\nCVE-2013-2466, CVE-2013-2468, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471,\nCVE-2013-2472, CVE-2013-2473, CVE-2013-3744)\n\nRed Hat would like to thank Tim Brown for reporting CVE-2013-1500, and\nUS-CERT for reporting CVE-2013-1571. US-CERT acknowledges Oracle as the\noriginal reporter of CVE-2013-1571.\n\nAll users of java-1.7.0-oracle are advised to upgrade to these updated\npackages, which provide Oracle Java 7 Update 25 and resolve these issues.\nAll running instances of Oracle Java must be restarted for the update to\ntake effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:0963",
        "url": "https://access.redhat.com/errata/RHSA-2013:0963"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
        "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
      },
      {
        "category": "external",
        "summary": "973474",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=973474"
      },
      {
        "category": "external",
        "summary": "975099",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975099"
      },
      {
        "category": "external",
        "summary": "975102",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975102"
      },
      {
        "category": "external",
        "summary": "975107",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975107"
      },
      {
        "category": "external",
        "summary": "975110",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975110"
      },
      {
        "category": "external",
        "summary": "975115",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975115"
      },
      {
        "category": "external",
        "summary": "975118",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975118"
      },
      {
        "category": "external",
        "summary": "975120",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975120"
      },
      {
        "category": "external",
        "summary": "975121",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975121"
      },
      {
        "category": "external",
        "summary": "975122",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975122"
      },
      {
        "category": "external",
        "summary": "975124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975124"
      },
      {
        "category": "external",
        "summary": "975125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975125"
      },
      {
        "category": "external",
        "summary": "975126",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975126"
      },
      {
        "category": "external",
        "summary": "975127",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975127"
      },
      {
        "category": "external",
        "summary": "975129",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975129"
      },
      {
        "category": "external",
        "summary": "975130",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975130"
      },
      {
        "category": "external",
        "summary": "975131",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975131"
      },
      {
        "category": "external",
        "summary": "975132",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975132"
      },
      {
        "category": "external",
        "summary": "975133",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975133"
      },
      {
        "category": "external",
        "summary": "975134",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975134"
      },
      {
        "category": "external",
        "summary": "975137",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975137"
      },
      {
        "category": "external",
        "summary": "975138",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975138"
      },
      {
        "category": "external",
        "summary": "975139",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975139"
      },
      {
        "category": "external",
        "summary": "975140",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975140"
      },
      {
        "category": "external",
        "summary": "975141",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975141"
      },
      {
        "category": "external",
        "summary": "975142",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975142"
      },
      {
        "category": "external",
        "summary": "975144",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975144"
      },
      {
        "category": "external",
        "summary": "975145",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975145"
      },
      {
        "category": "external",
        "summary": "975146",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975146"
      },
      {
        "category": "external",
        "summary": "975148",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975148"
      },
      {
        "category": "external",
        "summary": "975757",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975757"
      },
      {
        "category": "external",
        "summary": "975761",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975761"
      },
      {
        "category": "external",
        "summary": "975764",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975764"
      },
      {
        "category": "external",
        "summary": "975769",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975769"
      },
      {
        "category": "external",
        "summary": "975770",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975770"
      },
      {
        "category": "external",
        "summary": "975773",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975773"
      },
      {
        "category": "external",
        "summary": "975774",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975774"
      },
      {
        "category": "external",
        "summary": "975775",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975775"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0963.json"
      }
    ],
    "title": "Red Hat Security Advisory: java-1.7.0-oracle security update",
    "tracking": {
      "current_release_date": "2025-09-26T03:10:14+00:00",
      "generator": {
        "date": "2025-09-26T03:10:14+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.8"
        }
      },
      "id": "RHSA-2013:0963",
      "initial_release_date": "2013-06-20T14:42:00+00:00",
      "revision_history": [
        {
          "date": "2013-06-20T14:42:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-11-13T11:09:17+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-09-26T03:10:14+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
                  "product_id": "5Server-Supplementary-5.9.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:5::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                  "product_id": "6ComputeNode-Supplementary-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.25-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.25-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.25-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.25-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.25-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_id": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.25-1jpp.1.el5_9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.25-1jpp.1.el6_4?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_id": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.25-1jpp.1.el6_4?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_id": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.25-1jpp.1.el6_4?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_id": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.25-1jpp.1.el6_4?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.25-1jpp.1.el6_4?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                "product": {
                  "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.25-1jpp.1.el6_4?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
                "product": {
                  "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.25-1jpp.1.el5_9?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
                "product": {
                  "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.25-1jpp.1.el5_9?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
                "product": {
                  "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_id": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.25-1jpp.1.el5_9?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
                "product": {
                  "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.25-1jpp.1.el5_9?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
                "product": {
                  "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_id": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.25-1jpp.1.el5_9?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
                "product": {
                  "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_id": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.25-1jpp.1.el5_9?arch=i386\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
                "product": {
                  "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.25-1jpp.1.el6_4?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
                "product": {
                  "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.25-1jpp.1.el6_4?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
                "product": {
                  "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_id": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.25-1jpp.1.el6_4?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
                "product": {
                  "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.25-1jpp.1.el6_4?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
                "product": {
                  "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_id": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.25-1jpp.1.el6_4?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
                "product": {
                  "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_id": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.25-1jpp.1.el6_4?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386"
        },
        "product_reference": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386"
        },
        "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386"
        },
        "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386"
        },
        "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386"
        },
        "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386"
        },
        "product_reference": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-Supplementary-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686"
        },
        "product_reference": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        },
        "product_reference": "java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.4.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Tim Brown"
          ]
        }
      ],
      "cve": "CVE-2013-1500",
      "discovery_date": "2013-01-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975148"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Insecure shared memory permissions (2D, 8001034)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1500"
        },
        {
          "category": "external",
          "summary": "RHBZ#975148",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975148"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1500",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1500"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1500",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1500"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 3.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "OpenJDK: Insecure shared memory permissions (2D, 8001034)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "US-CERT"
          ]
        }
      ],
      "cve": "CVE-2013-1571",
      "discovery_date": "2013-06-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "973474"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1571"
        },
        {
          "category": "external",
          "summary": "RHBZ#973474",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=973474"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1571",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1571"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1571",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1571"
        },
        {
          "category": "external",
          "summary": "http://www.kb.cert.org/vuls/id/225657",
          "url": "http://www.kb.cert.org/vuls/id/225657"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)"
    },
    {
      "cve": "CVE-2013-2400",
      "discovery_date": "2013-06-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975774"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2400"
        },
        {
          "category": "external",
          "summary": "RHBZ#975774",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975774"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2400",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2400"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2400",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2400"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)"
    },
    {
      "cve": "CVE-2013-2407",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975127"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"XML security and the class loader.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2407"
        },
        {
          "category": "external",
          "summary": "RHBZ#975127",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975127"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2407"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744)"
    },
    {
      "cve": "CVE-2013-2412",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975144"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: JConsole SSL support (Serviceability, 8003703)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2412"
        },
        {
          "category": "external",
          "summary": "RHBZ#975144",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975144"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2412",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2412"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2412",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2412"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: JConsole SSL support (Serviceability, 8003703)"
    },
    {
      "cve": "CVE-2013-2437",
      "discovery_date": "2013-06-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975773"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2437"
        },
        {
          "category": "external",
          "summary": "RHBZ#975773",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975773"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2437",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2437"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2437",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2437"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)"
    },
    {
      "cve": "CVE-2013-2442",
      "discovery_date": "2013-06-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975770"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2466 and CVE-2013-2468.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2442"
        },
        {
          "category": "external",
          "summary": "RHBZ#975770",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975770"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2442",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2442"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2442",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2442"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)"
    },
    {
      "cve": "CVE-2013-2443",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975137"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect \"checking order\" within the AccessControlContext class.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: AccessControlContext check order issue (Libraries, 8001330)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2443"
        },
        {
          "category": "external",
          "summary": "RHBZ#975137",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975137"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2443",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2443"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2443",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2443"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: AccessControlContext check order issue (Libraries, 8001330)"
    },
    {
      "cve": "CVE-2013-2444",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975131"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not \"properly manage and restrict certain resources related to the processing of fonts,\" possibly involving temporary files.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Resource denial of service (AWT, 8001038)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2444"
        },
        {
          "category": "external",
          "summary": "RHBZ#975131",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975131"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2444",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2444"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2444",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2444"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: Resource denial of service (AWT, 8001038)"
    },
    {
      "cve": "CVE-2013-2445",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"handling of memory allocation errors.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Better handling of memory allocation errors (Hotspot, 7158805)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2445"
        },
        {
          "category": "external",
          "summary": "RHBZ#975124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2445"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: Better handling of memory allocation errors (Hotspot, 7158805)"
    },
    {
      "cve": "CVE-2013-2446",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975132"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: output stream access restrictions (CORBA, 8000642)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2446"
        },
        {
          "category": "external",
          "summary": "RHBZ#975132",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975132"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2446",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2446"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2446",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2446"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: output stream access restrictions (CORBA, 8000642)"
    },
    {
      "cve": "CVE-2013-2447",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975140"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket\u0027s local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Prevent revealing the local address (Networking, 8001318)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2447"
        },
        {
          "category": "external",
          "summary": "RHBZ#975140",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975140"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2447",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2447"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2447",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2447"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: Prevent revealing the local address (Networking, 8001318)"
    },
    {
      "cve": "CVE-2013-2448",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient \"access restrictions\" and \"robustness of sound classes.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Better access restrictions (Sound, 8006328)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2448"
        },
        {
          "category": "external",
          "summary": "RHBZ#975125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2448",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2448"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2448",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2448"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: Better access restrictions (Sound, 8006328)"
    },
    {
      "cve": "CVE-2013-2449",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975145"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2449"
        },
        {
          "category": "external",
          "summary": "RHBZ#975145",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975145"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2449",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2449"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2449",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2449"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288)"
    },
    {
      "cve": "CVE-2013-2450",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975141"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2450"
        },
        {
          "category": "external",
          "summary": "RHBZ#975141",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975141"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2450",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2450"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2450",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2450"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638)"
    },
    {
      "cve": "CVE-2013-2451",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975146"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: exclusive port binding (Networking, 7170730)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2451"
        },
        {
          "category": "external",
          "summary": "RHBZ#975146",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975146"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2451",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2451"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2451",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2451"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 3.7,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "OpenJDK: exclusive port binding (Networking, 7170730)"
    },
    {
      "cve": "CVE-2013-2452",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975138"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"network address handling in virtual machine identifiers\" and the lack of \"unique and unpredictable IDs\" in the java.rmi.dgc.VMID class.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Unique VMIDs (Libraries, 8001033)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2452"
        },
        {
          "category": "external",
          "summary": "RHBZ#975138",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975138"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2452",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2452"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2452",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2452"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: Unique VMIDs (Libraries, 8001033)"
    },
    {
      "cve": "CVE-2013-2453",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975134"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for \"package access\" by the MBeanServer Introspector.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: MBeanServer Introspector package access (JMX, 8008124)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2453"
        },
        {
          "category": "external",
          "summary": "RHBZ#975134",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975134"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2453",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2453"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2453",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2453"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: MBeanServer Introspector package access (JMX, 8008124)"
    },
    {
      "cve": "CVE-2013-2454",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975129"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: SerialJavaObject package restriction (JDBC, 8009554)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2454"
        },
        {
          "category": "external",
          "summary": "RHBZ#975129",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975129"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2454",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2454"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2454",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2454"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: SerialJavaObject package restriction (JDBC, 8009554)"
    },
    {
      "cve": "CVE-2013-2455",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975139"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: getEnclosing* checks (Libraries, 8007812)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2455"
        },
        {
          "category": "external",
          "summary": "RHBZ#975139",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975139"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2455",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2455"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2455",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2455"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: getEnclosing* checks (Libraries, 8007812)"
    },
    {
      "cve": "CVE-2013-2456",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975142"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: ObjectOutputStream access checks (Serialization, 8008132)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2456"
        },
        {
          "category": "external",
          "summary": "RHBZ#975142",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975142"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2456",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2456"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2456",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2456"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: ObjectOutputStream access checks (Serialization, 8008132)"
    },
    {
      "cve": "CVE-2013-2457",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of \"certain class checks\" that allows remote attackers to bypass intended class restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Proper class checking (JMX, 8008120)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2457"
        },
        {
          "category": "external",
          "summary": "RHBZ#975133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2457",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2457"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2457",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2457"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: Proper class checking (JMX, 8008120)"
    },
    {
      "cve": "CVE-2013-2458",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975130"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via \"an error related to method handles.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Method handles (Libraries, 8009424)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2458"
        },
        {
          "category": "external",
          "summary": "RHBZ#975130",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975130"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2458",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2458"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2458",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2458"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: Method handles (Libraries, 8009424)"
    },
    {
      "cve": "CVE-2013-2459",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975121"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"integer overflow checks.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Various AWT integer overflow checks (AWT, 8009071)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2459"
        },
        {
          "category": "external",
          "summary": "RHBZ#975121",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975121"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2459",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2459"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2459",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2459"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: Various AWT integer overflow checks (AWT, 8009071)"
    },
    {
      "cve": "CVE-2013-2460",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"insufficient access checks\" in the tracing component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: tracing insufficient access checks (Serviceability, 8010209)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2460"
        },
        {
          "category": "external",
          "summary": "RHBZ#975122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2460",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2460"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2460",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2460"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: tracing insufficient access checks (Serviceability, 8010209)"
    },
    {
      "cve": "CVE-2013-2461",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975126"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlier and R28.2.7 and earlier; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the June and July 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass verification of XML signatures via vectors related to a \"Missing check for [a] valid DOMCanonicalizationMethod canonicalization algorithm.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Missing check for valid DOMCanonicalizationMethod canonicalization algorithm (Libraries, 8014281)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2461"
        },
        {
          "category": "external",
          "summary": "RHBZ#975126",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975126"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2461",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2461"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2461",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2461"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenJDK: Missing check for valid DOMCanonicalizationMethod canonicalization algorithm (Libraries, 8014281)"
    },
    {
      "cve": "CVE-2013-2462",
      "discovery_date": "2013-06-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975769"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2462"
        },
        {
          "category": "external",
          "summary": "RHBZ#975769",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975769"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2462",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2462"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2462",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2462"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)"
    },
    {
      "cve": "CVE-2013-2463",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975115"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image attribute verification\" in 2D.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Incorrect image attribute verification (2D, 8012438)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2463"
        },
        {
          "category": "external",
          "summary": "RHBZ#975115",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975115"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2463",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2463"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2463",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2463"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: Incorrect image attribute verification (2D, 8012438)"
    },
    {
      "cve": "CVE-2013-2464",
      "discovery_date": "2013-06-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u25 (2D)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2464"
        },
        {
          "category": "external",
          "summary": "RHBZ#975757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2464"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u25 (2D)"
    },
    {
      "cve": "CVE-2013-2465",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975118"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image channel verification\" in 2D.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Incorrect image channel verification (2D, 8012597)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2465"
        },
        {
          "category": "external",
          "summary": "RHBZ#975118",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975118"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2465",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2465"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2465",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2465"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2022-03-28T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: Incorrect image channel verification (2D, 8012597)"
    },
    {
      "cve": "CVE-2013-2466",
      "discovery_date": "2013-06-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975764"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2466"
        },
        {
          "category": "external",
          "summary": "RHBZ#975764",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975764"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2466",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2466"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2466",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2466"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)"
    },
    {
      "cve": "CVE-2013-2468",
      "discovery_date": "2013-06-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2466.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2468"
        },
        {
          "category": "external",
          "summary": "RHBZ#975761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2468",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2468"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2468",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2468"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)"
    },
    {
      "cve": "CVE-2013-2469",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975120"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image layout verification\" in 2D.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Incorrect image layout verification (2D, 8012601)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2469"
        },
        {
          "category": "external",
          "summary": "RHBZ#975120",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975120"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2469",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2469"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2469",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2469"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: Incorrect image layout verification (2D, 8012601)"
    },
    {
      "cve": "CVE-2013-2470",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975099"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"ImagingLib byte lookup processing.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: ImagingLib byte lookup processing (2D, 8011243)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2470"
        },
        {
          "category": "external",
          "summary": "RHBZ#975099",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975099"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2470",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2470"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2470",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2470"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: ImagingLib byte lookup processing (2D, 8011243)"
    },
    {
      "cve": "CVE-2013-2471",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975102"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect IntegerComponentRaster size checks.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2471"
        },
        {
          "category": "external",
          "summary": "RHBZ#975102",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975102"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2471",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2471"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2471",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2471"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248)"
    },
    {
      "cve": "CVE-2013-2472",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975107"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect ShortBandedRaster size checks\" in 2D.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2472"
        },
        {
          "category": "external",
          "summary": "RHBZ#975107",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975107"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2472",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2472"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2472",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2472"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253)"
    },
    {
      "cve": "CVE-2013-2473",
      "discovery_date": "2013-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975110"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect ByteBandedRaster size checks\" in 2D.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: Incorrect ByteBandedRaster size checks (2D, 8011257)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2473"
        },
        {
          "category": "external",
          "summary": "RHBZ#975110",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975110"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2473",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2473"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2473",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2473"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: Incorrect ByteBandedRaster size checks (2D, 8011257)"
    },
    {
      "cve": "CVE-2013-3744",
      "discovery_date": "2013-06-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "975775"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
          "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
          "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-3744"
        },
        {
          "category": "external",
          "summary": "RHBZ#975775",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975775"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-3744",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-3744"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-3744",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3744"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        }
      ],
      "release_date": "2013-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-20T14:42:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0963"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.i386",
            "5Server-Supplementary-5.9.Z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el5_9.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Client-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6ComputeNode-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Server-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-devel-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-javafx-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-jdbc-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-plugin-1:1.7.0.25-1jpp.1.el6_4.x86_64",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.i686",
            "6Workstation-Supplementary-6.4.z:java-1.7.0-oracle-src-1:1.7.0.25-1jpp.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "JDK: unspecified vulnerability fixed in 7u25 (Deployment)"
    }
  ]
}

CVE-2013-2453 (GCVE-0-2013-2453)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for "package access" by the MBeanServer Introspector.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=975134	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/60644	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19588	vdb-entry, signature, x_refsource_OVAL
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c14aa930b032	x_refsource_MISC
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16545	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19611	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.524Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975134"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "60644",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60644"
          },
          {
            "name": "oval:org.mitre.oval:def:19588",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19588"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c14aa930b032"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16545",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16545"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19611",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19611"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for \"package access\" by the MBeanServer Introspector."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975134"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "60644",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60644"
        },
        {
          "name": "oval:org.mitre.oval:def:19588",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19588"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c14aa930b032"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16545",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16545"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19611",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19611"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2453",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for \"package access\" by the MBeanServer Introspector."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975134",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975134"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "60644",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60644"
            },
            {
              "name": "oval:org.mitre.oval:def:19588",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19588"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c14aa930b032",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c14aa930b032"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16545",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16545"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19611",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19611"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2453",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.524Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2456 (GCVE-0-2013-2456)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/141facdacbf0	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=975142	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19676	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/60641	vdb-entry, x_refsource_BID
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19643	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17294	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19267	vdb-entry, signature, x_refsource_OVAL

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.496Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/141facdacbf0"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975142"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19676",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19676"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "60641",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60641"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19643",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19643"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17294",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17294"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19267",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19267"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/141facdacbf0"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975142"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19676",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19676"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "60641",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60641"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19643",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19643"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17294",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17294"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19267",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19267"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2456",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/141facdacbf0",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/141facdacbf0"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975142",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975142"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19676",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19676"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "60641",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60641"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19643",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19643"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17294",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17294"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19267",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19267"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2456",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.496Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-1500 (GCVE-0-2013-1500)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:04

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.

References

URL

Tags

	http://www.securityfocus.com/bid/60627	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19663	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17221	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19726	vdb-entry, signature, x_refsource_OVAL
	http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975148	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	https://twitter.com/timb_machine/status/347110990124568577	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/1111f9acb96b	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:04:48.993Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "60627",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60627"
          },
          {
            "name": "oval:org.mitre.oval:def:19663",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19663"
          },
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17221",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17221"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "oval:org.mitre.oval:def:19726",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19726"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975148"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://twitter.com/timb_machine/status/347110990124568577"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/1111f9acb96b"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "60627",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60627"
        },
        {
          "name": "oval:org.mitre.oval:def:19663",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19663"
        },
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17221",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17221"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "oval:org.mitre.oval:def:19726",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19726"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975148"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://twitter.com/timb_machine/status/347110990124568577"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/1111f9acb96b"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-1500",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "60627",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60627"
            },
            {
              "name": "oval:org.mitre.oval:def:19663",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19663"
            },
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17221",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17221"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "oval:org.mitre.oval:def:19726",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19726"
            },
            {
              "name": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975148",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975148"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "https://twitter.com/timb_machine/status/347110990124568577",
              "refsource": "MISC",
              "url": "https://twitter.com/timb_machine/status/347110990124568577"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/1111f9acb96b",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/1111f9acb96b"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-1500",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-01-30T00:00:00",
    "dateUpdated": "2024-08-06T15:04:48.993Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2457 (GCVE-0-2013-2457)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.

References

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=975133	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ffef9e05564e	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19638	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19696	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/60632	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19276	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17256	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.635Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975133"
          },
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ffef9e05564e"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19638",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19638"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19696",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19696"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "60632",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60632"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19276",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19276"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "oval:org.mitre.oval:def:17256",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17256"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of \"certain class checks\" that allows remote attackers to bypass intended class restrictions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975133"
        },
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ffef9e05564e"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19638",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19638"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19696",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19696"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "60632",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60632"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19276",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19276"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "oval:org.mitre.oval:def:17256",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17256"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2457",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of \"certain class checks\" that allows remote attackers to bypass intended class restrictions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975133",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975133"
            },
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ffef9e05564e",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ffef9e05564e"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19638",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19638"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19696",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19696"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "60632",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60632"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19276",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19276"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "oval:org.mitre.oval:def:17256",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17256"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2457",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.635Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2455 (GCVE-0-2013-2455)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/60619	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17214	vdb-entry, signature, x_refsource_OVAL
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19560	vdb-entry, signature, x_refsource_OVAL
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/5d5ca338574f	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=975139	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19435	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19622	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.427Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "60619",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60619"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17214",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17214"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19560",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19560"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/5d5ca338574f"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975139"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19435",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19435"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19622",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19622"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "60619",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60619"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17214",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17214"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19560",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19560"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/5d5ca338574f"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975139"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19435",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19435"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19622",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19622"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2455",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "60619",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60619"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17214",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17214"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19560",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19560"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/5d5ca338574f",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/5d5ca338574f"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975139",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975139"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19435",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19435"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19622",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19622"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2455",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.427Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2462 (GCVE-0-2013-2462)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17257	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19378	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.525Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17257",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17257"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "name": "oval:org.mitre.oval:def:19378",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19378"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17257",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17257"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "name": "oval:org.mitre.oval:def:19378",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19378"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2462",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17257",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17257"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "oval:org.mitre.oval:def:19378",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19378"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2462",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.525Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2473 (GCVE-0-2013-2473)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.

References

URL

Tags

	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/259d4998ce2f	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17189	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18888	vdb-entry, signature, x_refsource_OVAL
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19600	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19652	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=975110	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/60623	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.529Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/259d4998ce2f"
          },
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17189",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17189"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "oval:org.mitre.oval:def:18888",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18888"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19600",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19600"
          },
          {
            "name": "oval:org.mitre.oval:def:19652",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19652"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975110"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "60623",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60623"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect ByteBandedRaster size checks\" in 2D."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/259d4998ce2f"
        },
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17189",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17189"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "oval:org.mitre.oval:def:18888",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18888"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19600",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19600"
        },
        {
          "name": "oval:org.mitre.oval:def:19652",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19652"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975110"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "60623",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60623"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2473",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect ByteBandedRaster size checks\" in 2D."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/259d4998ce2f",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/259d4998ce2f"
            },
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17189",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17189"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "oval:org.mitre.oval:def:18888",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18888"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19600",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19600"
            },
            {
              "name": "oval:org.mitre.oval:def:19652",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19652"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975110",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975110"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "60623",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60623"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2473",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.529Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2459 (GCVE-0-2013-2459)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17181	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19587	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19741	vdb-entry, signature, x_refsource_OVAL
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c98afec1bf86	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=975121	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/60647	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19310	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.526Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17181",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17181"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:19587",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19587"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19741",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19741"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c98afec1bf86"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975121"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "60647",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60647"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19310",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19310"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"integer overflow checks.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17181",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17181"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:19587",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19587"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19741",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19741"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c98afec1bf86"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975121"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "60647",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60647"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19310",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19310"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2459",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"integer overflow checks.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17181",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17181"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:19587",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19587"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19741",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19741"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c98afec1bf86",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c98afec1bf86"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975121",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975121"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "60647",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60647"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19310",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19310"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2459",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.526Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2443 (GCVE-0-2013-2443)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect "checking order" within the AccessControlContext class.

References

URL

Tags

	http://www.securityfocus.com/bid/60646	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17230	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/f6dce3552285	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/0344da726f70	x_refsource_MISC
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=975137	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19299	vdb-entry, signature, x_refsource_OVAL

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.530Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "60646",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60646"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "oval:org.mitre.oval:def:17230",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17230"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/f6dce3552285"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/0344da726f70"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975137"
          },
          {
            "name": "oval:org.mitre.oval:def:19299",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19299"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect \"checking order\" within the AccessControlContext class."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "60646",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60646"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "oval:org.mitre.oval:def:17230",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17230"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/f6dce3552285"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/0344da726f70"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975137"
        },
        {
          "name": "oval:org.mitre.oval:def:19299",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19299"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2443",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect \"checking order\" within the AccessControlContext class."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "60646",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60646"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "oval:org.mitre.oval:def:17230",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17230"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/f6dce3552285",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/f6dce3552285"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/0344da726f70",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/0344da726f70"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975137",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975137"
            },
            {
              "name": "oval:org.mitre.oval:def:19299",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19299"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2443",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.530Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2471 (GCVE-0-2013-2471)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16840	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19441	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19413	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/4c3d38927a26	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19295	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/60659	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.redhat.com/show_bug.cgi?id=975102	x_refsource_CONFIRM
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.547Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "oval:org.mitre.oval:def:16840",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16840"
          },
          {
            "name": "oval:org.mitre.oval:def:19441",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19441"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:19413",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19413"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/4c3d38927a26"
          },
          {
            "name": "oval:org.mitre.oval:def:19295",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19295"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "60659",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60659"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975102"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect IntegerComponentRaster size checks.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "oval:org.mitre.oval:def:16840",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16840"
        },
        {
          "name": "oval:org.mitre.oval:def:19441",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19441"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:19413",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19413"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/4c3d38927a26"
        },
        {
          "name": "oval:org.mitre.oval:def:19295",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19295"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "60659",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60659"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975102"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2471",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect IntegerComponentRaster size checks.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "oval:org.mitre.oval:def:16840",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16840"
            },
            {
              "name": "oval:org.mitre.oval:def:19441",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19441"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:19413",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19413"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/4c3d38927a26",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/4c3d38927a26"
            },
            {
              "name": "oval:org.mitre.oval:def:19295",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19295"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "60659",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60659"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975102",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975102"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2471",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.547Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2450 (GCVE-0-2013-2450)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.

References

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=975141	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19562	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17176	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19290	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19645	vdb-entry, signature, x_refsource_OVAL
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/285765be3123	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/60638	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.510Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975141"
          },
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "oval:org.mitre.oval:def:19562",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19562"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "oval:org.mitre.oval:def:17176",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17176"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:19290",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19290"
          },
          {
            "name": "oval:org.mitre.oval:def:19645",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19645"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/285765be3123"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "60638",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60638"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975141"
        },
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "oval:org.mitre.oval:def:19562",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19562"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "oval:org.mitre.oval:def:17176",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17176"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:19290",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19290"
        },
        {
          "name": "oval:org.mitre.oval:def:19645",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19645"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/285765be3123"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "60638",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60638"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2450",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975141",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975141"
            },
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "oval:org.mitre.oval:def:19562",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19562"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "oval:org.mitre.oval:def:17176",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17176"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:19290",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19290"
            },
            {
              "name": "oval:org.mitre.oval:def:19645",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19645"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/285765be3123",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/285765be3123"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "60638",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60638"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2450",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2445 (GCVE-0-2013-2445)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "handling of memory allocation errors."

References

URL

Tags

	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19516	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/ed3ac73a70ab	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	https://bugzilla.redhat.com/show_bug.cgi?id=975124	x_refsource_CONFIRM
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19190	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19059	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17090	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/60639	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.523Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:19516",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19516"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/ed3ac73a70ab"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975124"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:19190",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19190"
          },
          {
            "name": "oval:org.mitre.oval:def:19059",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19059"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "name": "oval:org.mitre.oval:def:17090",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17090"
          },
          {
            "name": "60639",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60639"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"handling of memory allocation errors.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:19516",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19516"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/ed3ac73a70ab"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975124"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:19190",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19190"
        },
        {
          "name": "oval:org.mitre.oval:def:19059",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19059"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "name": "oval:org.mitre.oval:def:17090",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17090"
        },
        {
          "name": "60639",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60639"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2445",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"handling of memory allocation errors.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:19516",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19516"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/ed3ac73a70ab",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/ed3ac73a70ab"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975124",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975124"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:19190",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19190"
            },
            {
              "name": "oval:org.mitre.oval:def:19059",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19059"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "oval:org.mitre.oval:def:17090",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17090"
            },
            {
              "name": "60639",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60639"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2445",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.523Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2448 (GCVE-0-2013-2448)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/91ce9432f88d	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19632	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/60640	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17052	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=975125	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19669	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19692	vdb-entry, signature, x_refsource_OVAL

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.513Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/91ce9432f88d"
          },
          {
            "name": "oval:org.mitre.oval:def:19632",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19632"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "60640",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60640"
          },
          {
            "name": "oval:org.mitre.oval:def:17052",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17052"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975125"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "oval:org.mitre.oval:def:19669",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19669"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19692",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19692"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient \"access restrictions\" and \"robustness of sound classes.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/91ce9432f88d"
        },
        {
          "name": "oval:org.mitre.oval:def:19632",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19632"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "60640",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60640"
        },
        {
          "name": "oval:org.mitre.oval:def:17052",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17052"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975125"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "oval:org.mitre.oval:def:19669",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19669"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19692",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19692"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2448",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient \"access restrictions\" and \"robustness of sound classes.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/91ce9432f88d",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/91ce9432f88d"
            },
            {
              "name": "oval:org.mitre.oval:def:19632",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19632"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "60640",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60640"
            },
            {
              "name": "oval:org.mitre.oval:def:17052",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17052"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975125",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975125"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "oval:org.mitre.oval:def:19669",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19669"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19692",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19692"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2448",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.513Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2461 (GCVE-0-2013-2461)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlier and R28.2.7 and earlier; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June and July 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass verification of XML signatures via vectors related to a "Missing check for [a] valid DOMCanonicalizationMethod canonicalization algorithm."

References

URL

Tags

	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/abe9ea5a50d2	x_refsource_MISC
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16887	vdb-entry, signature, x_refsource_OVAL
	http://www.vmware.com/security/advisories/VMSA-2014-0012.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19582	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/534161/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19565	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2014/Dec/23	mailing-list, x_refsource_FULLDISC
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/60645	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.redhat.com/show_bug.cgi?id=975126	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.518Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/abe9ea5a50d2"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "oval:org.mitre.oval:def:16887",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16887"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "oval:org.mitre.oval:def:19582",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19582"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"
          },
          {
            "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
          },
          {
            "name": "oval:org.mitre.oval:def:19565",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19565"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"
          },
          {
            "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "60645",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60645"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975126"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlier and R28.2.7 and earlier; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the June and July 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass verification of XML signatures via vectors related to a \"Missing check for [a] valid DOMCanonicalizationMethod canonicalization algorithm.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/abe9ea5a50d2"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "oval:org.mitre.oval:def:16887",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16887"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "oval:org.mitre.oval:def:19582",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19582"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"
        },
        {
          "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
        },
        {
          "name": "oval:org.mitre.oval:def:19565",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19565"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"
        },
        {
          "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "60645",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60645"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975126"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2461",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlier and R28.2.7 and earlier; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the June and July 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass verification of XML signatures via vectors related to a \"Missing check for [a] valid DOMCanonicalizationMethod canonicalization algorithm.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/abe9ea5a50d2",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/abe9ea5a50d2"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "oval:org.mitre.oval:def:16887",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16887"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "oval:org.mitre.oval:def:19582",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19582"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"
            },
            {
              "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
            },
            {
              "name": "oval:org.mitre.oval:def:19565",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19565"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"
            },
            {
              "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "60645",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60645"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975126",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975126"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2461",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.518Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-3744 (GCVE-0-2013-3744)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 16:22

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17180	vdb-entry, signature, x_refsource_OVAL
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19684	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/60654	vdb-entry, x_refsource_BID
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:22:00.328Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "oval:org.mitre.oval:def:17180",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17180"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19684",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19684"
          },
          {
            "name": "60654",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60654"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-17T21:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "oval:org.mitre.oval:def:17180",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17180"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19684",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19684"
        },
        {
          "name": "60654",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60654"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-3744",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "oval:org.mitre.oval:def:17180",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17180"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19684",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19684"
            },
            {
              "name": "60654",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60654"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-3744",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-06-03T00:00:00",
    "dateUpdated": "2024-08-06T16:22:00.328Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2470 (GCVE-0-2013-2470)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."

References

URL

Tags

	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19348	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19655	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/89d9ec9e80c1	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19517	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/60651	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=975099	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16806	vdb-entry, signature, x_refsource_OVAL

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.591Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:19348",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19348"
          },
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:19655",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19655"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/89d9ec9e80c1"
          },
          {
            "name": "oval:org.mitre.oval:def:19517",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19517"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "60651",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60651"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975099"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16806",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16806"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"ImagingLib byte lookup processing.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:19348",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19348"
        },
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:19655",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19655"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/89d9ec9e80c1"
        },
        {
          "name": "oval:org.mitre.oval:def:19517",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19517"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "60651",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60651"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975099"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16806",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16806"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2470",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"ImagingLib byte lookup processing.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:19348",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19348"
            },
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:19655",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19655"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/89d9ec9e80c1",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/89d9ec9e80c1"
            },
            {
              "name": "oval:org.mitre.oval:def:19517",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19517"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "60651",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60651"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975099",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975099"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16806",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16806"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2470",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.591Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2447 (GCVE-0-2013-2447)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18699	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cc656d61e713	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19252	vdb-entry, signature, x_refsource_OVAL
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19324	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16770	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.redhat.com/show_bug.cgi?id=975140	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/60629	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.446Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "oval:org.mitre.oval:def:18699",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18699"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cc656d61e713"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19252",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19252"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19324",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19324"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16770",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16770"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975140"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          },
          {
            "name": "60629",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60629"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket\u0027s local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "oval:org.mitre.oval:def:18699",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18699"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cc656d61e713"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19252",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19252"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19324",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19324"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16770",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16770"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975140"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        },
        {
          "name": "60629",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60629"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2447",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket\u0027s local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "oval:org.mitre.oval:def:18699",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18699"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cc656d61e713",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cc656d61e713"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19252",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19252"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19324",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19324"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16770",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16770"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975140",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975140"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            },
            {
              "name": "60629",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60629"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2447",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.446Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2460 (GCVE-0-2013-2460)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "insufficient access checks" in the tracing component.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/160cde99bb1a	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19129	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17116	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=975122	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.790Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/160cde99bb1a"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "oval:org.mitre.oval:def:19129",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19129"
          },
          {
            "name": "oval:org.mitre.oval:def:17116",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17116"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975122"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"insufficient access checks\" in the tracing component."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/160cde99bb1a"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "oval:org.mitre.oval:def:19129",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19129"
        },
        {
          "name": "oval:org.mitre.oval:def:17116",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17116"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975122"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2460",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"insufficient access checks\" in the tracing component."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/160cde99bb1a",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/160cde99bb1a"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "oval:org.mitre.oval:def:19129",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19129"
            },
            {
              "name": "oval:org.mitre.oval:def:17116",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17116"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975122",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975122"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2460",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2464 (GCVE-0-2013-2464)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19227	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19708	vdb-entry, signature, x_refsource_OVAL
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/60631	vdb-entry, x_refsource_BID
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16389	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19390	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.846Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "oval:org.mitre.oval:def:19227",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19227"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19708",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19708"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "60631",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60631"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16389",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16389"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "name": "oval:org.mitre.oval:def:19390",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19390"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "oval:org.mitre.oval:def:19227",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19227"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19708",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19708"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "60631",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60631"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16389",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16389"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "name": "oval:org.mitre.oval:def:19390",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19390"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2464",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "oval:org.mitre.oval:def:19227",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19227"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19708",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19708"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "60631",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60631"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16389",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16389"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "oval:org.mitre.oval:def:19390",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19390"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2464",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.846Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2466 (GCVE-0-2013-2466)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16982	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/60624	vdb-entry, x_refsource_BID
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19234	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19649	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.549Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "oval:org.mitre.oval:def:16982",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16982"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "60624",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60624"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19234",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19234"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "name": "oval:org.mitre.oval:def:19649",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19649"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "oval:org.mitre.oval:def:16982",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16982"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "60624",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60624"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19234",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19234"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "name": "oval:org.mitre.oval:def:19649",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19649"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2466",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "oval:org.mitre.oval:def:16982",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16982"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "60624",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60624"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19234",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19234"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "oval:org.mitre.oval:def:19649",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19649"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2466",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.549Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2463 (GCVE-0-2013-2463)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/60655	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=975115	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19620	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b79d56eee18e	x_refsource_MISC
	http://www.informationweek.com/security/vulnerabilities/hackers-target-java-6-with-security-expl/240160443	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17149	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19373	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19685	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.511Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "60655",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60655"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975115"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19620",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19620"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b79d56eee18e"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.informationweek.com/security/vulnerabilities/hackers-target-java-6-with-security-expl/240160443"
          },
          {
            "name": "oval:org.mitre.oval:def:17149",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17149"
          },
          {
            "name": "oval:org.mitre.oval:def:19373",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19373"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19685",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19685"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image attribute verification\" in 2D."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "60655",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60655"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975115"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19620",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19620"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b79d56eee18e"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.informationweek.com/security/vulnerabilities/hackers-target-java-6-with-security-expl/240160443"
        },
        {
          "name": "oval:org.mitre.oval:def:17149",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17149"
        },
        {
          "name": "oval:org.mitre.oval:def:19373",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19373"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19685",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19685"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2463",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image attribute verification\" in 2D."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "60655",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60655"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975115",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975115"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19620",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19620"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b79d56eee18e",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b79d56eee18e"
            },
            {
              "name": "http://www.informationweek.com/security/vulnerabilities/hackers-target-java-6-with-security-expl/240160443",
              "refsource": "MISC",
              "url": "http://www.informationweek.com/security/vulnerabilities/hackers-target-java-6-with-security-expl/240160443"
            },
            {
              "name": "oval:org.mitre.oval:def:17149",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17149"
            },
            {
              "name": "oval:org.mitre.oval:def:19373",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19373"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19685",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19685"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2463",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.511Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2472 (GCVE-0-2013-2472)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18742	vdb-entry, signature, x_refsource_OVAL
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3cd4bec64e31	x_refsource_MISC
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19543	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/60656	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16712	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18846	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=975107	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.551Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "oval:org.mitre.oval:def:18742",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18742"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3cd4bec64e31"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19543",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19543"
          },
          {
            "name": "60656",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60656"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16712",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16712"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "oval:org.mitre.oval:def:18846",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18846"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975107"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect ShortBandedRaster size checks\" in 2D."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "oval:org.mitre.oval:def:18742",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18742"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3cd4bec64e31"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19543",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19543"
        },
        {
          "name": "60656",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60656"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16712",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16712"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "oval:org.mitre.oval:def:18846",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18846"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975107"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2472",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect ShortBandedRaster size checks\" in 2D."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "oval:org.mitre.oval:def:18742",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18742"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3cd4bec64e31",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3cd4bec64e31"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19543",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19543"
            },
            {
              "name": "60656",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60656"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16712",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16712"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "oval:org.mitre.oval:def:18846",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18846"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975107",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975107"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2472",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.551Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2400 (GCVE-0-2013-2400)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16899	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19019	vdb-entry, signature, x_refsource_OVAL
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.384Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "oval:org.mitre.oval:def:16899",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16899"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19019",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19019"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "oval:org.mitre.oval:def:16899",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16899"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19019",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19019"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2400",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "oval:org.mitre.oval:def:16899",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16899"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19019",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19019"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2400",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.384Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2446 (GCVE-0-2013-2446)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19658	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19062	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=975132	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16311	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19225	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/60620	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/corba/rev/161ec4dd450d	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.498Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19658",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19658"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "oval:org.mitre.oval:def:19062",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19062"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975132"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16311",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16311"
          },
          {
            "name": "oval:org.mitre.oval:def:19225",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19225"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "60620",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60620"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/corba/rev/161ec4dd450d"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19658",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19658"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "oval:org.mitre.oval:def:19062",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19062"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975132"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16311",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16311"
        },
        {
          "name": "oval:org.mitre.oval:def:19225",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19225"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "60620",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60620"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/corba/rev/161ec4dd450d"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2446",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19658",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19658"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "oval:org.mitre.oval:def:19062",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19062"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975132",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975132"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16311",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16311"
            },
            {
              "name": "oval:org.mitre.oval:def:19225",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19225"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "60620",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60620"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/corba/rev/161ec4dd450d",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/corba/rev/161ec4dd450d"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2446",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.498Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2437 (GCVE-0-2013-2437)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19551	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16617	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/60636	vdb-entry, x_refsource_BID
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19521	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.433Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "oval:org.mitre.oval:def:19551",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19551"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "APPLE-SA-2013-04-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16617",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16617"
          },
          {
            "name": "60636",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60636"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "oval:org.mitre.oval:def:19521",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19521"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "oval:org.mitre.oval:def:19551",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19551"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "APPLE-SA-2013-04-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16617",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16617"
        },
        {
          "name": "60636",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60636"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "oval:org.mitre.oval:def:19521",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19521"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2437",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "oval:org.mitre.oval:def:19551",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19551"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "APPLE-SA-2013-04-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16617",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16617"
            },
            {
              "name": "60636",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60636"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "oval:org.mitre.oval:def:19521",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19521"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2437",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.433Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2458 (GCVE-0-2013-2458)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via "an error related to method handles."

References

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=975130	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19709	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/9efb5fb77027	x_refsource_MISC
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17069	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.546Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975130"
          },
          {
            "name": "oval:org.mitre.oval:def:19709",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19709"
          },
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/9efb5fb77027"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17069",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17069"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via \"an error related to method handles.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975130"
        },
        {
          "name": "oval:org.mitre.oval:def:19709",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19709"
        },
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/9efb5fb77027"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17069",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17069"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2458",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via \"an error related to method handles.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975130",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975130"
            },
            {
              "name": "oval:org.mitre.oval:def:19709",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19709"
            },
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/9efb5fb77027",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/9efb5fb77027"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17069",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17069"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2458",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.546Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2468 (GCVE-0-2013-2468)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19478	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19605	vdb-entry, signature, x_refsource_OVAL
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17206	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/60637	vdb-entry, x_refsource_BID
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.621Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19478",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19478"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19605",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19605"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17206",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17206"
          },
          {
            "name": "60637",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60637"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2466."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19478",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19478"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19605",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19605"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17206",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17206"
        },
        {
          "name": "60637",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60637"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2468",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2466."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19478",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19478"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19605",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19605"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17206",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17206"
            },
            {
              "name": "60637",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60637"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2468",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.621Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2412 (GCVE-0-2013-2412)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/60618	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=975144	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19375	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3927a18bbcbf	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19633	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17098	vdb-entry, signature, x_refsource_OVAL

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.422Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "60618",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60618"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975144"
          },
          {
            "name": "oval:org.mitre.oval:def:19375",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19375"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3927a18bbcbf"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19633",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19633"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17098",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17098"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "60618",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60618"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975144"
        },
        {
          "name": "oval:org.mitre.oval:def:19375",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19375"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3927a18bbcbf"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19633",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19633"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17098",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17098"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2412",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "60618",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60618"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975144",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975144"
            },
            {
              "name": "oval:org.mitre.oval:def:19375",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19375"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3927a18bbcbf",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3927a18bbcbf"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19633",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19633"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17098",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17098"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2412",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.422Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2407 (GCVE-0-2013-2407)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader."

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c82ed89b21bc	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17195	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/60653	vdb-entry, x_refsource_BID
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=975127	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/0e80792291c0	x_refsource_MISC
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18622	vdb-entry, signature, x_refsource_OVAL
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19568	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.486Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c82ed89b21bc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17195",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17195"
          },
          {
            "name": "60653",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60653"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975127"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/0e80792291c0"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "name": "oval:org.mitre.oval:def:18622",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18622"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19568",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19568"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"XML security and the class loader.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c82ed89b21bc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17195",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17195"
        },
        {
          "name": "60653",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60653"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975127"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/0e80792291c0"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "name": "oval:org.mitre.oval:def:18622",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18622"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19568",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19568"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2407",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"XML security and the class loader.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c82ed89b21bc",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c82ed89b21bc"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17195",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17195"
            },
            {
              "name": "60653",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60653"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975127",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975127"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/0e80792291c0",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/0e80792291c0"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "oval:org.mitre.oval:def:18622",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18622"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19568",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19568"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2407",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.486Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2449 (GCVE-0-2013-2449)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path.

References

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=975145	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b1a2b9ac9714	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17192	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18717	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.513Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975145"
          },
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b1a2b9ac9714"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:17192",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17192"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "oval:org.mitre.oval:def:18717",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18717"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975145"
        },
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b1a2b9ac9714"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:17192",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17192"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "oval:org.mitre.oval:def:18717",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18717"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2449",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975145",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975145"
            },
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b1a2b9ac9714",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b1a2b9ac9714"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:17192",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17192"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "oval:org.mitre.oval:def:18717",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18717"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2449",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.513Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2469 (GCVE-0-2013-2469)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19713	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975120	x_refsource_CONFIRM
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/60658	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19552	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19314	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/64055b403176	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17042	vdb-entry, signature, x_refsource_OVAL

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.528Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "oval:org.mitre.oval:def:19713",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19713"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975120"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "60658",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60658"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19552",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19552"
          },
          {
            "name": "oval:org.mitre.oval:def:19314",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19314"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/64055b403176"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17042",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17042"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image layout verification\" in 2D."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "oval:org.mitre.oval:def:19713",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19713"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975120"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "60658",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60658"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19552",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19552"
        },
        {
          "name": "oval:org.mitre.oval:def:19314",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19314"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/64055b403176"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17042",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17042"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2469",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image layout verification\" in 2D."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "oval:org.mitre.oval:def:19713",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19713"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975120",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975120"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "60658",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60658"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19552",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19552"
            },
            {
              "name": "oval:org.mitre.oval:def:19314",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19314"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/64055b403176",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/64055b403176"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17042",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17042"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2469",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.528Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-1571 (GCVE-0-2013-1571)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:04

Severity ?

CWE

Summary

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=973474	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17215	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19518	vdb-entry, signature, x_refsource_OVAL
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	http://www.kb.cert.org/vuls/id/225657	third-party-advisory, x_refsource_CERT-VN
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/60634	vdb-entry, x_refsource_BID
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/langtools/rev/17ee569d0c01	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19667	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19718	vdb-entry, signature, x_refsource_OVAL
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0%40%3Ccommits.openoffice.apache.org%3E	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:04:49.488Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=973474"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:17215",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17215"
          },
          {
            "name": "oval:org.mitre.oval:def:19518",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19518"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "VU#225657",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/225657"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "60634",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60634"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/langtools/rev/17ee569d0c01"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19667",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19667"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "name": "oval:org.mitre.oval:def:19718",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19718"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          },
          {
            "name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[openoffice-commits] 20200305 svn commit: r1874832 - in /openoffice/ooo-site/trunk/content: download/checksums.html download/globalvars.js download/test/globalvars.js security/cves/CVE-2012-0037.html security/cves/CVE-2013-1571.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0%40%3Ccommits.openoffice.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-05T13:06:06",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=973474"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:17215",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17215"
        },
        {
          "name": "oval:org.mitre.oval:def:19518",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19518"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "VU#225657",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/225657"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "60634",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60634"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/langtools/rev/17ee569d0c01"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19667",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19667"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "name": "oval:org.mitre.oval:def:19718",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19718"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        },
        {
          "name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[openoffice-commits] 20200305 svn commit: r1874832 - in /openoffice/ooo-site/trunk/content: download/checksums.html download/globalvars.js download/test/globalvars.js security/cves/CVE-2012-0037.html security/cves/CVE-2013-1571.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0%40%3Ccommits.openoffice.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-1571",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=973474",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=973474"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:17215",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17215"
            },
            {
              "name": "oval:org.mitre.oval:def:19518",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19518"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "VU#225657",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/225657"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "60634",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60634"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/langtools/rev/17ee569d0c01",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/langtools/rev/17ee569d0c01"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19667",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19667"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "oval:org.mitre.oval:def:19718",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19718"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            },
            {
              "name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[openoffice-commits] 20200305 svn commit: r1874832 - in /openoffice/ooo-site/trunk/content: download/checksums.html download/globalvars.js download/test/globalvars.js security/cves/CVE-2012-0037.html security/cves/CVE-2013-1571.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0@%3Ccommits.openoffice.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-1571",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-01-30T00:00:00",
    "dateUpdated": "2024-08-06T15:04:49.488Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2442 (GCVE-0-2013-2442)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16803	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/60643	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21644197	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19460	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19569	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.505Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16803",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16803"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "60643",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60643"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
          },
          {
            "name": "oval:org.mitre.oval:def:19460",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19460"
          },
          {
            "name": "oval:org.mitre.oval:def:19569",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19569"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2466 and CVE-2013-2468."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16803",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16803"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "60643",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60643"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
        },
        {
          "name": "oval:org.mitre.oval:def:19460",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19460"
        },
        {
          "name": "oval:org.mitre.oval:def:19569",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19569"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2442",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2466 and CVE-2013-2468."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16803",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16803"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "60643",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60643"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21644197"
            },
            {
              "name": "oval:org.mitre.oval:def:19460",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19460"
            },
            {
              "name": "oval:org.mitre.oval:def:19569",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19569"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2442",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.505Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2452 (GCVE-0-2013-2452)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/60617	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16580	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19231	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19213	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/25ebac17c3cb	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19665	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=975138	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.498Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "60617",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60617"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16580",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16580"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:19231",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19231"
          },
          {
            "name": "oval:org.mitre.oval:def:19213",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19213"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/25ebac17c3cb"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19665",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19665"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975138"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"network address handling in virtual machine identifiers\" and the lack of \"unique and unpredictable IDs\" in the java.rmi.dgc.VMID class."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "60617",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60617"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16580",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16580"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:19231",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19231"
        },
        {
          "name": "oval:org.mitre.oval:def:19213",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19213"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/25ebac17c3cb"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19665",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19665"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975138"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2452",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"network address handling in virtual machine identifiers\" and the lack of \"unique and unpredictable IDs\" in the java.rmi.dgc.VMID class."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "60617",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60617"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16580",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16580"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:19231",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19231"
            },
            {
              "name": "oval:org.mitre.oval:def:19213",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19213"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/25ebac17c3cb",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/25ebac17c3cb"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19665",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19665"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975138",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975138"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2452",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.498Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2465 (GCVE-0-2013-2465)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2025-10-22 00:05

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/60657	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703	vdb-entry, signature, x_refsource_OVAL
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=975118	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-05-06T17:15:03.175Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2013-2465-detect-java-vulnerability"
          },
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2013-2465-mitigate-java-vulnerability"
          },
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "60657",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60657"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:19455",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455"
          },
          {
            "name": "oval:org.mitre.oval:def:19703",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040"
          },
          {
            "name": "oval:org.mitre.oval:def:19074",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17106",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975118"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2013-2465",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-10T19:00:39.857228Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-03-28",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2465"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-693",
                "description": "CWE-693 Protection Mechanism Failure",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-22T00:05:41.755Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2465"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2022-03-28T00:00:00+00:00",
            "value": "CVE-2013-2465 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image channel verification\" in 2D."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "60657",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60657"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:19455",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455"
        },
        {
          "name": "oval:org.mitre.oval:def:19703",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040"
        },
        {
          "name": "oval:org.mitre.oval:def:19074",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17106",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975118"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2465",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image channel verification\" in 2D."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "60657",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60657"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1264",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:19455",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455"
            },
            {
              "name": "oval:org.mitre.oval:def:19703",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040"
            },
            {
              "name": "oval:org.mitre.oval:def:19074",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17106",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975118",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975118"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2465",
    "datePublished": "2013-06-18T22:00:00.000Z",
    "dateReserved": "2013-03-05T00:00:00.000Z",
    "dateUpdated": "2025-10-22T00:05:41.755Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2454 (GCVE-0-2013-2454)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.

References

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=975129	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19237	vdb-entry, signature, x_refsource_OVAL
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19470	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ec931d812faa	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17236	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/60650	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19407	vdb-entry, signature, x_refsource_OVAL
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.544Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975129"
          },
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "SUSE-SU-2013:1256",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "oval:org.mitre.oval:def:19237",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19237"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19470",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19470"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ec931d812faa"
          },
          {
            "name": "oval:org.mitre.oval:def:17236",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17236"
          },
          {
            "name": "60650",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60650"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "name": "oval:org.mitre.oval:def:19407",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19407"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975129"
        },
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "SUSE-SU-2013:1256",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "oval:org.mitre.oval:def:19237",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19237"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19470",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19470"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ec931d812faa"
        },
        {
          "name": "oval:org.mitre.oval:def:17236",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17236"
        },
        {
          "name": "60650",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60650"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "name": "oval:org.mitre.oval:def:19407",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19407"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2454",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975129",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975129"
            },
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "SUSE-SU-2013:1256",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "oval:org.mitre.oval:def:19237",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19237"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19470",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19470"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ec931d812faa",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ec931d812faa"
            },
            {
              "name": "oval:org.mitre.oval:def:17236",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17236"
            },
            {
              "name": "60650",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60650"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "oval:org.mitre.oval:def:19407",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19407"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2454",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.544Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2444 (GCVE-0-2013-2444)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16851	vdb-entry, signature, x_refsource_OVAL
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=137545505800971&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/60633	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19602	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.redhat.com/show_bug.cgi?id=975131	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1081.html	vendor-advisory, x_refsource_REDHAT
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://advisories.mageia.org/MGASA-2013-0185.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19476	vdb-entry, signature, x_refsource_OVAL
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/09c14ca57ff0	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19307	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:183	vendor-advisory, x_refsource_MANDRIVA
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.478Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "oval:org.mitre.oval:def:16851",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16851"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "HPSBUX02907",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "SSRT101305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "HPSBUX02922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
          },
          {
            "name": "60633",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60633"
          },
          {
            "name": "SUSE-SU-2013:1263",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19602",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19602"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975131"
          },
          {
            "name": "SUSE-SU-2013:1293",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
          },
          {
            "name": "RHSA-2013:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19476",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19476"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/09c14ca57ff0"
          },
          {
            "name": "oval:org.mitre.oval:def:19307",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19307"
          },
          {
            "name": "MDVSA-2013:183",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not \"properly manage and restrict certain resources related to the processing of fonts,\" possibly involving temporary files."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "oval:org.mitre.oval:def:16851",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16851"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "HPSBUX02907",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "SSRT101305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "HPSBUX02922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
        },
        {
          "name": "60633",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60633"
        },
        {
          "name": "SUSE-SU-2013:1263",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19602",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19602"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975131"
        },
        {
          "name": "SUSE-SU-2013:1293",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
        },
        {
          "name": "RHSA-2013:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19476",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19476"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/09c14ca57ff0"
        },
        {
          "name": "oval:org.mitre.oval:def:19307",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19307"
        },
        {
          "name": "MDVSA-2013:183",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2444",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not \"properly manage and restrict certain resources related to the processing of fonts,\" possibly involving temporary files."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "oval:org.mitre.oval:def:16851",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16851"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "HPSBUX02907",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545505800971\u0026w=2"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "SSRT101305",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "HPSBUX02922",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880"
            },
            {
              "name": "60633",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60633"
            },
            {
              "name": "SUSE-SU-2013:1263",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19602",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19602"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=975131",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975131"
            },
            {
              "name": "SUSE-SU-2013:1293",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html"
            },
            {
              "name": "RHSA-2013:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2013-0185.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2013-0185.html"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19476",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19476"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/09c14ca57ff0",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/09c14ca57ff0"
            },
            {
              "name": "oval:org.mitre.oval:def:19307",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19307"
            },
            {
              "name": "MDVSA-2013:183",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2444",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.478Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2451 (GCVE-0-2013-2451)

Vulnerability from cvelistv5

Published

2013-06-18 22:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use.

References

URL

Tags

	http://www.securityfocus.com/bid/60625	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-1060.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=137545592101387&w=2	vendor-advisory, x_refsource_HP
	https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975146	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/54154	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17265	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-1059.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19535	vdb-entry, signature, x_refsource_OVAL
	http://www.us-cert.gov/ncas/alerts/TA13-169A	third-party-advisory, x_refsource_CERT
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/8dd8266a2f4b	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-0963.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1456.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21642336	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.428Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "60625",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60625"
          },
          {
            "name": "RHSA-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
          },
          {
            "name": "HPSBUX02908",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975146"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
          },
          {
            "name": "SUSE-SU-2013:1257",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
          },
          {
            "name": "54154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54154"
          },
          {
            "name": "RHSA-2013:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17265",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17265"
          },
          {
            "name": "RHSA-2013:1059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
          },
          {
            "name": "oval:org.mitre.oval:def:19535",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19535"
          },
          {
            "name": "TA13-169A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/8dd8266a2f4b"
          },
          {
            "name": "RHSA-2013:0963",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
          },
          {
            "name": "SUSE-SU-2013:1255",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
          },
          {
            "name": "RHSA-2013:1456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
          },
          {
            "name": "SUSE-SU-2013:1305",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-06-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "60625",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60625"
        },
        {
          "name": "RHSA-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
        },
        {
          "name": "HPSBUX02908",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975146"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
        },
        {
          "name": "SUSE-SU-2013:1257",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
        },
        {
          "name": "54154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54154"
        },
        {
          "name": "RHSA-2013:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17265",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17265"
        },
        {
          "name": "RHSA-2013:1059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
        },
        {
          "name": "oval:org.mitre.oval:def:19535",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19535"
        },
        {
          "name": "TA13-169A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/8dd8266a2f4b"
        },
        {
          "name": "RHSA-2013:0963",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
        },
        {
          "name": "SUSE-SU-2013:1255",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
        },
        {
          "name": "RHSA-2013:1456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
        },
        {
          "name": "SUSE-SU-2013:1305",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2451",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "60625",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60625"
            },
            {
              "name": "RHSA-2013:1060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html"
            },
            {
              "name": "HPSBUX02908",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=137545592101387\u0026w=2"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975146",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975146"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html"
            },
            {
              "name": "SUSE-SU-2013:1257",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html"
            },
            {
              "name": "54154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54154"
            },
            {
              "name": "RHSA-2013:1455",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17265",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17265"
            },
            {
              "name": "RHSA-2013:1059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html"
            },
            {
              "name": "oval:org.mitre.oval:def:19535",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19535"
            },
            {
              "name": "TA13-169A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/8dd8266a2f4b",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/8dd8266a2f4b"
            },
            {
              "name": "RHSA-2013:0963",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html"
            },
            {
              "name": "SUSE-SU-2013:1255",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html"
            },
            {
              "name": "RHSA-2013:1456",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336"
            },
            {
              "name": "SUSE-SU-2013:1305",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2451",
    "datePublished": "2013-06-18T22:00:00",
    "dateReserved": "2013-03-05T00:00:00",
    "dateUpdated": "2024-08-06T15:36:46.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2013:0963

Vulnerability from csaf_redhat

CVE-2013-2453 (GCVE-0-2013-2453)

Vulnerability from cvelistv5

CVE-2013-2456 (GCVE-0-2013-2456)

Vulnerability from cvelistv5

CVE-2013-1500 (GCVE-0-2013-1500)

Vulnerability from cvelistv5

CVE-2013-2457 (GCVE-0-2013-2457)

Vulnerability from cvelistv5

CVE-2013-2455 (GCVE-0-2013-2455)

Vulnerability from cvelistv5

CVE-2013-2462 (GCVE-0-2013-2462)

Vulnerability from cvelistv5

CVE-2013-2473 (GCVE-0-2013-2473)

Vulnerability from cvelistv5

CVE-2013-2459 (GCVE-0-2013-2459)

Vulnerability from cvelistv5

CVE-2013-2443 (GCVE-0-2013-2443)

Vulnerability from cvelistv5

CVE-2013-2471 (GCVE-0-2013-2471)

Vulnerability from cvelistv5

CVE-2013-2450 (GCVE-0-2013-2450)

Vulnerability from cvelistv5

CVE-2013-2445 (GCVE-0-2013-2445)

Vulnerability from cvelistv5

CVE-2013-2448 (GCVE-0-2013-2448)

Vulnerability from cvelistv5

CVE-2013-2461 (GCVE-0-2013-2461)

Vulnerability from cvelistv5

CVE-2013-3744 (GCVE-0-2013-3744)

Vulnerability from cvelistv5

CVE-2013-2470 (GCVE-0-2013-2470)

Vulnerability from cvelistv5

CVE-2013-2447 (GCVE-0-2013-2447)

Vulnerability from cvelistv5

CVE-2013-2460 (GCVE-0-2013-2460)

Vulnerability from cvelistv5

CVE-2013-2464 (GCVE-0-2013-2464)

Vulnerability from cvelistv5

CVE-2013-2466 (GCVE-0-2013-2466)

Vulnerability from cvelistv5

CVE-2013-2463 (GCVE-0-2013-2463)

Vulnerability from cvelistv5

CVE-2013-2472 (GCVE-0-2013-2472)

Vulnerability from cvelistv5

CVE-2013-2400 (GCVE-0-2013-2400)

Vulnerability from cvelistv5

CVE-2013-2446 (GCVE-0-2013-2446)

Vulnerability from cvelistv5

CVE-2013-2437 (GCVE-0-2013-2437)

Vulnerability from cvelistv5

CVE-2013-2458 (GCVE-0-2013-2458)

Vulnerability from cvelistv5

CVE-2013-2468 (GCVE-0-2013-2468)

Vulnerability from cvelistv5

CVE-2013-2412 (GCVE-0-2013-2412)

Vulnerability from cvelistv5

CVE-2013-2407 (GCVE-0-2013-2407)

Vulnerability from cvelistv5

CVE-2013-2449 (GCVE-0-2013-2449)

Vulnerability from cvelistv5

CVE-2013-2469 (GCVE-0-2013-2469)

Vulnerability from cvelistv5

CVE-2013-1571 (GCVE-0-2013-1571)

Vulnerability from cvelistv5

CVE-2013-2442 (GCVE-0-2013-2442)

Vulnerability from cvelistv5

CVE-2013-2452 (GCVE-0-2013-2452)

Vulnerability from cvelistv5

CVE-2013-2465 (GCVE-0-2013-2465)

Vulnerability from cvelistv5

CVE-2013-2454 (GCVE-0-2013-2454)

Vulnerability from cvelistv5

CVE-2013-2444 (GCVE-0-2013-2444)

Vulnerability from cvelistv5

CVE-2013-2451 (GCVE-0-2013-2451)

Vulnerability from cvelistv5

Tags