GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2013_1505

Vulnerability from csaf_redhat - Published: 2013-11-05 17:58 - Updated: 2024-11-25 11:56
Summary
Red Hat Security Advisory: java-1.6.0-openjdk security update
Severity
Important
Notes
Topic: Updated java-1.6.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
Details: The java-1.6.0-openjdk packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Java Software Development Kit. Multiple input checking flaws were found in the 2D component native image parsing code. A specially crafted image file could trigger a Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with the privileges of the user running the Java Virtual Machine. (CVE-2013-5782) The class loader did not properly check the package access for non-public proxy classes. A remote attacker could possibly use this flaw to execute arbitrary code with the privileges of the user running the Java Virtual Machine. (CVE-2013-5830) Multiple improper permission check issues were discovered in the 2D, CORBA, JNDI, and Libraries components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. (CVE-2013-5829, CVE-2013-5814, CVE-2013-5817, CVE-2013-5842, CVE-2013-5850) Multiple input checking flaws were discovered in the JPEG image reading and writing code in the 2D component. An untrusted Java application or applet could use these flaws to corrupt the Java Virtual Machine memory and bypass Java sandbox restrictions. (CVE-2013-5809) The FEATURE_SECURE_PROCESSING setting was not properly honored by the javax.xml.transform package transformers. A remote attacker could use this flaw to supply a crafted XML that would be processed without the intended security restrictions. (CVE-2013-5802) Multiple errors were discovered in the way the JAXP and Security components processes XML inputs. A remote attacker could create a crafted XML that would cause a Java application to use an excessive amount of CPU and memory when processed. (CVE-2013-5825, CVE-2013-4002, CVE-2013-5823) Multiple improper permission check issues were discovered in the Libraries, Swing, JAX-WS, JGSS, AWT, Beans, and Scripting components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2013-3829, CVE-2013-5840, CVE-2013-5774, CVE-2013-5783, CVE-2013-5820, CVE-2013-5849, CVE-2013-5790, CVE-2013-5784) It was discovered that the 2D component image library did not properly check bounds when performing image conversions. An untrusted Java application or applet could use this flaw to disclose portions of the Java Virtual Machine memory. (CVE-2013-5778) Multiple input sanitization flaws were discovered in javadoc. When javadoc documentation was generated from an untrusted Java source code and hosted on a domain not controlled by the code author, these issues could make it easier to perform cross-site scripting attacks. (CVE-2013-5804, CVE-2013-5797) Various OpenJDK classes that represent cryptographic keys could leak private key information by including sensitive data in strings returned by toString() methods. These flaws could possibly lead to an unexpected exposure of sensitive key data. (CVE-2013-5780) The Java Heap Analysis Tool (jhat) failed to properly escape all data added into the HTML pages it generated. Crafted content in the memory of a Java program analyzed using jhat could possibly be used to conduct cross-site scripting attacks. (CVE-2013-5772) The Kerberos implementation in OpenJDK did not properly parse KDC responses. A malformed packet could cause a Java application using JGSS to exit. (CVE-2013-5803) All users of java-1.6.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

Affected products
Product Identifier Version Remediation
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10.src
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-src-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Client-5.10.Z:java-1.6.0-openjdk-src-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10.src
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-src-1:1.6.0.0-1.42.1.11.14.el5_10.i386
Vendor Fix fix
Unresolved product id: 5Server-5.10.Z:java-1.6.0-openjdk-src-1:1.6.0.0-1.42.1.11.14.el5_10.x86_64
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.src
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.src
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Client-optional-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.src
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.src
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.src
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.src
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Server-optional-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.src
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.src
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.i686
Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.4.z:java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4.x86_64
Vendor Fix fix
Threats
Impact Moderate

A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.

CWE-20 - Improper Input Validation
Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Low

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CWE-125 - Out-of-bounds Read
Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Swing.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to BEANS.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Low

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Important

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JGSS.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Low

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5829.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JAXP.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5842.

Affected products
Fixed 130 products, the same list as for CVE-2013-3829
Threats
Impact Critical
References
URL Category
https://access.redhat.com/errata/RHSA-2013:1505 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=1018713 external
https://bugzilla.redhat.com/show_bug.cgi?id=1018717 external
https://bugzilla.redhat.com/show_bug.cgi?id=1018720 external
https://bugzilla.redhat.com/show_bug.cgi?id=1018727 external
https://bugzilla.redhat.com/show_bug.cgi?id=1018736 external
https://bugzilla.redhat.com/show_bug.cgi?id=1018750 external
https://bugzilla.redhat.com/show_bug.cgi?id=1018785 external
https://bugzilla.redhat.com/show_bug.cgi?id=1018831 external
https://bugzilla.redhat.com/show_bug.cgi?id=1018972 external
https://bugzilla.redhat.com/show_bug.cgi?id=1018984 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019108 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019110 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019113 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019115 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019117 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019118 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019123 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019127 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019130 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019131 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019133 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019137 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019139 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019145 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019147 external
https://bugzilla.redhat.com/show_bug.cgi?id=1019176 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2013-3829 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019133 external
https://www.cve.org/CVERecord?id=CVE-2013-3829 external
https://nvd.nist.gov/vuln/detail/CVE-2013-3829 external
http://www.oracle.com/technetwork/topics/security… external
https://access.redhat.com/security/cve/CVE-2013-4002 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019176 external
https://www.cve.org/CVERecord?id=CVE-2013-4002 external
https://nvd.nist.gov/vuln/detail/CVE-2013-4002 external
https://access.redhat.com/security/cve/CVE-2013-5772 self
https://bugzilla.redhat.com/show_bug.cgi?id=1018717 external
https://www.cve.org/CVERecord?id=CVE-2013-5772 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5772 external
https://access.redhat.com/security/cve/CVE-2013-5774 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019147 external
https://www.cve.org/CVERecord?id=CVE-2013-5774 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5774 external
https://access.redhat.com/security/cve/CVE-2013-5778 self
https://bugzilla.redhat.com/show_bug.cgi?id=1018984 external
https://www.cve.org/CVERecord?id=CVE-2013-5778 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5778 external
https://access.redhat.com/security/cve/CVE-2013-5780 self
https://bugzilla.redhat.com/show_bug.cgi?id=1018785 external
https://www.cve.org/CVERecord?id=CVE-2013-5780 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5780 external
https://access.redhat.com/security/cve/CVE-2013-5782 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019108 external
https://www.cve.org/CVERecord?id=CVE-2013-5782 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5782 external
https://access.redhat.com/security/cve/CVE-2013-5783 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019137 external
https://www.cve.org/CVERecord?id=CVE-2013-5783 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5783 external
https://access.redhat.com/security/cve/CVE-2013-5784 self
https://bugzilla.redhat.com/show_bug.cgi?id=1018727 external
https://www.cve.org/CVERecord?id=CVE-2013-5784 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5784 external
https://access.redhat.com/security/cve/CVE-2013-5790 self
https://bugzilla.redhat.com/show_bug.cgi?id=1018736 external
https://www.cve.org/CVERecord?id=CVE-2013-5790 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5790 external
https://access.redhat.com/security/cve/CVE-2013-5797 self
https://bugzilla.redhat.com/show_bug.cgi?id=1018720 external
https://www.cve.org/CVERecord?id=CVE-2013-5797 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5797 external
https://access.redhat.com/security/cve/CVE-2013-5802 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019130 external
https://www.cve.org/CVERecord?id=CVE-2013-5802 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5802 external
https://access.redhat.com/security/cve/CVE-2013-5803 self
https://bugzilla.redhat.com/show_bug.cgi?id=1018713 external
https://www.cve.org/CVERecord?id=CVE-2013-5803 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5803 external
https://access.redhat.com/security/cve/CVE-2013-5804 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019131 external
https://www.cve.org/CVERecord?id=CVE-2013-5804 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5804 external
https://access.redhat.com/security/cve/CVE-2013-5809 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019113 external
https://www.cve.org/CVERecord?id=CVE-2013-5809 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5809 external
https://access.redhat.com/security/cve/CVE-2013-5814 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019117 external
https://www.cve.org/CVERecord?id=CVE-2013-5814 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5814 external
https://access.redhat.com/security/cve/CVE-2013-5817 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019118 external
https://www.cve.org/CVERecord?id=CVE-2013-5817 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5817 external
https://access.redhat.com/security/cve/CVE-2013-5820 self
https://bugzilla.redhat.com/show_bug.cgi?id=1018972 external
https://www.cve.org/CVERecord?id=CVE-2013-5820 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5820 external
https://access.redhat.com/security/cve/CVE-2013-5823 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019145 external
https://www.cve.org/CVERecord?id=CVE-2013-5823 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5823 external
https://access.redhat.com/security/cve/CVE-2013-5825 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019139 external
https://www.cve.org/CVERecord?id=CVE-2013-5825 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5825 external
https://access.redhat.com/security/cve/CVE-2013-5829 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019115 external
https://www.cve.org/CVERecord?id=CVE-2013-5829 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5829 external
https://access.redhat.com/security/cve/CVE-2013-5830 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019110 external
https://www.cve.org/CVERecord?id=CVE-2013-5830 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5830 external
https://access.redhat.com/security/cve/CVE-2013-5840 self
https://bugzilla.redhat.com/show_bug.cgi?id=1018831 external
https://www.cve.org/CVERecord?id=CVE-2013-5840 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5840 external
https://access.redhat.com/security/cve/CVE-2013-5842 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019123 external
https://www.cve.org/CVERecord?id=CVE-2013-5842 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5842 external
https://access.redhat.com/security/cve/CVE-2013-5849 self
https://bugzilla.redhat.com/show_bug.cgi?id=1018750 external
https://www.cve.org/CVERecord?id=CVE-2013-5849 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5849 external
https://access.redhat.com/security/cve/CVE-2013-5850 self
https://bugzilla.redhat.com/show_bug.cgi?id=1019127 external
https://www.cve.org/CVERecord?id=CVE-2013-5850 external
https://nvd.nist.gov/vuln/detail/CVE-2013-5850 external

Loading 1.1 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…