csaf_redhat - rhsa-2015

rhsa-2015_0068

Vulnerability from csaf_redhat

Published

2015-01-20 22:38

Modified

2024-11-14 16:28

Summary

Red Hat Security Advisory: java-1.7.0-openjdk security update

Notes

Topic

Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions. (CVE-2014-6601) Multiple improper permission check issues were discovered in the JAX-WS, and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. (CVE-2015-0412, CVE-2015-0408) A flaw was found in the way the Hotspot garbage collector handled phantom references. An untrusted Java application or applet could use this flaw to corrupt the Java Virtual Machine memory and, possibly, execute arbitrary code, bypassing Java sandbox restrictions. (CVE-2015-0395) A flaw was found in the way the DER (Distinguished Encoding Rules) decoder in the Security component in OpenJDK handled negative length values. A specially crafted, DER-encoded input could cause a Java application to enter an infinite loop when decoded. (CVE-2015-0410) A flaw was found in the way the SSL 3.0 protocol handled padding bytes when decrypting messages that were encrypted using block ciphers in cipher block chaining (CBC) mode. This flaw could possibly allow a man-in-the-middle (MITM) attacker to decrypt portions of the cipher text using a padding oracle attack. (CVE-2014-3566) Note: This update disables SSL 3.0 by default to address this issue. The jdk.tls.disabledAlgorithms security property can be used to re-enable SSL 3.0 support if needed. For additional information, refer to the Red Hat Bugzilla bug linked to in the References section. It was discovered that the SSL/TLS implementation in the JSSE component in OpenJDK failed to properly check whether the ChangeCipherSpec was received during the SSL/TLS connection handshake. An MITM attacker could possibly use this flaw to force a connection to be established without encryption being enabled. (CVE-2014-6593) An information leak flaw was found in the Swing component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions. (CVE-2015-0407) A NULL pointer dereference flaw was found in the MulticastSocket implementation in the Libraries component of OpenJDK. An untrusted Java application or applet could possibly use this flaw to bypass certain Java sandbox restrictions. (CVE-2014-6587) Multiple boundary check flaws were found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could allow an untrusted Java application or applet to disclose portions of the Java Virtual Machine memory. (CVE-2014-6585, CVE-2014-6591) Multiple insecure temporary file use issues were found in the way the Hotspot component in OpenJDK created performance statistics and error log files. A local attacker could possibly make a victim using OpenJDK overwrite arbitrary files using a symlink attack. (CVE-2015-0383) The CVE-2015-0383 issue was discovered by Red Hat. All users of java-1.7.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated java-1.7.0-openjdk packages that fix multiple security issues are\nnow available for Red Hat Enterprise Linux 5.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime\nEnvironment and the OpenJDK 7 Java Software Development Kit.\n\nA flaw was found in the way the Hotspot component in OpenJDK verified\nbytecode from the class files. An untrusted Java application or applet\ncould possibly use this flaw to bypass Java sandbox restrictions.\n(CVE-2014-6601)\n\nMultiple improper permission check issues were discovered in the JAX-WS,\nand RMI components in OpenJDK. An untrusted Java application or applet\ncould use these flaws to bypass Java sandbox restrictions. (CVE-2015-0412,\nCVE-2015-0408)\n\nA flaw was found in the way the Hotspot garbage collector handled phantom\nreferences. An untrusted Java application or applet could use this flaw to\ncorrupt the Java Virtual Machine memory and, possibly, execute arbitrary\ncode, bypassing Java sandbox restrictions. (CVE-2015-0395)\n\nA flaw was found in the way the DER (Distinguished Encoding Rules) decoder\nin the Security component in OpenJDK handled negative length values. A\nspecially crafted, DER-encoded input could cause a Java application to\nenter an infinite loop when decoded. (CVE-2015-0410)\n\nA flaw was found in the way the SSL 3.0 protocol handled padding bytes when\ndecrypting messages that were encrypted using block ciphers in cipher block\nchaining (CBC) mode. This flaw could possibly allow a man-in-the-middle\n(MITM) attacker to decrypt portions of the cipher text using a padding\noracle attack. (CVE-2014-3566)\n\nNote: This update disables SSL 3.0 by default to address this issue.\nThe jdk.tls.disabledAlgorithms security property can be used to re-enable\nSSL 3.0 support if needed. For additional information, refer to the Red Hat\nBugzilla bug linked to in the References section.\n\nIt was discovered that the SSL/TLS implementation in the JSSE component in\nOpenJDK failed to properly check whether the ChangeCipherSpec was received\nduring the SSL/TLS connection handshake. An MITM attacker could possibly\nuse this flaw to force a connection to be established without encryption\nbeing enabled. (CVE-2014-6593)\n\nAn information leak flaw was found in the Swing component in OpenJDK. An\nuntrusted Java application or applet could use this flaw to bypass certain\nJava sandbox restrictions. (CVE-2015-0407)\n\nA NULL pointer dereference flaw was found in the MulticastSocket\nimplementation in the Libraries component of OpenJDK. An untrusted Java\napplication or applet could possibly use this flaw to bypass certain Java\nsandbox restrictions. (CVE-2014-6587)\n\nMultiple boundary check flaws were found in the font parsing code in the 2D\ncomponent in OpenJDK. A specially crafted font file could allow an\nuntrusted Java application or applet to disclose portions of the Java\nVirtual Machine memory. (CVE-2014-6585, CVE-2014-6591)\n\nMultiple insecure temporary file use issues were found in the way the\nHotspot component in OpenJDK created performance statistics and error log\nfiles. A local attacker could possibly make a victim using OpenJDK\noverwrite arbitrary files using a symlink attack. (CVE-2015-0383)\n\nThe CVE-2015-0383 issue was discovered by Red Hat.\n\nAll users of java-1.7.0-openjdk are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK Java\nmust be restarted for the update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:0068",
        "url": "https://access.redhat.com/errata/RHSA-2015:0068"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=1152789#c82",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152789#c82"
      },
      {
        "category": "external",
        "summary": "1123870",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1123870"
      },
      {
        "category": "external",
        "summary": "1152789",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152789"
      },
      {
        "category": "external",
        "summary": "1183020",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183020"
      },
      {
        "category": "external",
        "summary": "1183021",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183021"
      },
      {
        "category": "external",
        "summary": "1183023",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183023"
      },
      {
        "category": "external",
        "summary": "1183031",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183031"
      },
      {
        "category": "external",
        "summary": "1183043",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183043"
      },
      {
        "category": "external",
        "summary": "1183044",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183044"
      },
      {
        "category": "external",
        "summary": "1183049",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183049"
      },
      {
        "category": "external",
        "summary": "1183645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183645"
      },
      {
        "category": "external",
        "summary": "1183646",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183646"
      },
      {
        "category": "external",
        "summary": "1183715",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183715"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0068.json"
      }
    ],
    "title": "Red Hat Security Advisory: java-1.7.0-openjdk security update",
    "tracking": {
      "current_release_date": "2024-11-14T16:28:17+00:00",
      "generator": {
        "date": "2024-11-14T16:28:17+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2015:0068",
      "initial_release_date": "2015-01-20T22:38:26+00:00",
      "revision_history": [
        {
          "date": "2015-01-20T22:38:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-01-20T22:38:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T16:28:17+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client-5.11.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server-5.11.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
                "product": {
                  "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_id": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-javadoc@1.7.0.75-2.5.4.0.el5_11?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
                "product": {
                  "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_id": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.75-2.5.4.0.el5_11?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
                "product": {
                  "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.75-2.5.4.0.el5_11?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
                "product": {
                  "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.75-2.5.4.0.el5_11?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
                "product": {
                  "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_id": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.75-2.5.4.0.el5_11?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
                "product": {
                  "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.75-2.5.4.0.el5_11?arch=i386\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_id": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-javadoc@1.7.0.75-2.5.4.0.el5_11?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_id": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.75-2.5.4.0.el5_11?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.75-2.5.4.0.el5_11?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.75-2.5.4.0.el5_11?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_id": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.75-2.5.4.0.el5_11?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.75-2.5.4.0.el5_11?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
                "product": {
                  "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
                  "product_id": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.75-2.5.4.0.el5_11?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
        "relates_to_product_reference": "5Server-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
        "relates_to_product_reference": "5Server-5.11.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-3566",
      "cwe": {
        "id": "CWE-757",
        "name": "Selection of Less-Secure Algorithm During Negotiation (\u0027Algorithm Downgrade\u0027)"
      },
      "discovery_date": "2014-10-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1152789"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way SSL 3.0 handled padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining (CBC) mode. This flaw allows a man-in-the-middle (MITM) attacker to decrypt a selected byte of a cipher text in as few as 256 tries if they are able to force a victim application to repeatedly send the same data over newly created SSL 3.0 connections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of openssl as shipped with Red Hat Enterprise Linux 5, 6 and 7, Red Hat JBoss Enterprise Application Platform 5 and 6, and Red Hat JBoss Web Server 1 and 2, Red Hat Enterprise Virtualization Hypervisor 6.5, and Red Hat Storage 2.1.\n\nThis issue affects the version of nss as shipped with Red Hat Enterprise Linux 5, 6 and 7.\n\nAdditional information can be found in the Red Hat Knowledgebase article: \nhttps://access.redhat.com/articles/1232123",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-3566"
        },
        {
          "category": "external",
          "summary": "RHBZ#1152789",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152789"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3566",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-3566"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3566",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3566"
        }
      ],
      "release_date": "2014-10-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack"
    },
    {
      "cve": "CVE-2014-6585",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2015-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1183645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A boundary check flaw was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could allow an untrusted Java application or applet to disclose portions of the Java Virtual Machine memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ICU: font parsing OOB read (OpenJDK 2D, 8055489)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-6585"
        },
        {
          "category": "external",
          "summary": "RHBZ#1183645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-6585",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-6585"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-6585",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6585"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "ICU: font parsing OOB read (OpenJDK 2D, 8055489)"
    },
    {
      "cve": "CVE-2014-6587",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2015-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1183715"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A NULL pointer dereference flaw was found in the MulticastSocket implementation in the Libraries component of OpenJDK. An untrusted Java application or applet could possibly use this flaw to bypass certain Java sandbox restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-6587"
        },
        {
          "category": "external",
          "summary": "RHBZ#1183715",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183715"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-6587",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-6587"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-6587",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6587"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "SINGLE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:M/Au:S/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)"
    },
    {
      "cve": "CVE-2014-6591",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2015-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1183646"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A boundary check flaw was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could allow an untrusted Java application or applet to disclose portions of the Java Virtual Machine memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ICU: font parsing OOB read (OpenJDK 2D, 8056276)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-6591"
        },
        {
          "category": "external",
          "summary": "RHBZ#1183646",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183646"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-6591",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-6591"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-6591",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6591"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "ICU: font parsing OOB read (OpenJDK 2D, 8056276)"
    },
    {
      "cve": "CVE-2014-6593",
      "discovery_date": "2015-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1183049"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was discovered that the SSL/TLS implementation in the JSSE component in OpenJDK failed to properly check whether the ChangeCipherSpec was received during the SSL/TLS connection handshake. An MITM attacker could possibly use this flaw to force a connection to be established without encryption being enabled.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-6593"
        },
        {
          "category": "external",
          "summary": "RHBZ#1183049",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183049"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-6593",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-6593"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-6593",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6593"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555)"
    },
    {
      "cve": "CVE-2014-6601",
      "discovery_date": "2015-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1183020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-6601"
        },
        {
          "category": "external",
          "summary": "RHBZ#1183020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-6601",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-6601"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-6601",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6601"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982)"
    },
    {
      "acknowledgments": [
        {
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2015-0383",
      "cwe": {
        "id": "CWE-377",
        "name": "Insecure Temporary File"
      },
      "discovery_date": "2014-07-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1123870"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple insecure temporary file use issues were found in the way the Hotspot component in OpenJDK created performance statistics and error log files. A local attacker could possibly make a victim using OpenJDK overwrite arbitrary files using a symlink attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-0383"
        },
        {
          "category": "external",
          "summary": "RHBZ#1123870",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1123870"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0383",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-0383"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0383",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0383"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 3.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)"
    },
    {
      "cve": "CVE-2015-0395",
      "discovery_date": "2015-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1183031"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way the Hotspot garbage collector handled phantom references. An untrusted Java application or applet could use this flaw to corrupt the Java Virtual Machine memory and, possibly, execute arbitrary code, bypassing Java sandbox restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-0395"
        },
        {
          "category": "external",
          "summary": "RHBZ#1183031",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183031"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0395",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-0395"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0395",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0395"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125)"
    },
    {
      "cve": "CVE-2015-0407",
      "discovery_date": "2015-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1183043"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An information leak flaw was found in the Swing component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: directory information leak via file chooser (Swing, 8055304)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-0407"
        },
        {
          "category": "external",
          "summary": "RHBZ#1183043",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183043"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-0407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0407"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: directory information leak via file chooser (Swing, 8055304)"
    },
    {
      "cve": "CVE-2015-0408",
      "discovery_date": "2015-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1183023"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An improper permission check issue was discovered in the RMI component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-0408"
        },
        {
          "category": "external",
          "summary": "RHBZ#1183023",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183023"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0408",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-0408"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0408",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0408"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)"
    },
    {
      "cve": "CVE-2015-0410",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2015-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1183044"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way the DER (Distinguished Encoding Rules) decoder in the Security component in OpenJDK handled negative length values. A specially crafted, DER-encoded input could cause a Java application to enter an infinite loop when decoded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: DER decoder infinite loop  (Security, 8059485)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-0410"
        },
        {
          "category": "external",
          "summary": "RHBZ#1183044",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183044"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0410",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-0410"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0410",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0410"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: DER decoder infinite loop  (Security, 8059485)"
    },
    {
      "cve": "CVE-2015-0412",
      "discovery_date": "2015-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1183021"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An improper permission check issue was discovered in the JAX-WS component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
          "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
          "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-0412"
        },
        {
          "category": "external",
          "summary": "RHBZ#1183021",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1183021"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0412",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-0412"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0412",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0412"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA"
        }
      ],
      "release_date": "2015-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-01-20T22:38:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0068"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Client-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Client-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.src",
            "5Server-5.11.Z:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.0.el5_11.x86_64",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.i386",
            "5Server-5.11.Z:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.0.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)"
    }
  ]
}

cve-2014-6585

Vulnerability from cvelistv5

Published

2015-01-21 15:00

Modified

2024-08-06 12:17

Severity ?

Summary

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0136.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0264.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201603-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	https://www-304.ibm.com/support/docview.wss?uid=swg21695474	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	http://www.debian.org/security/2015/dsa-3323	vendor-advisory, x_refsource_DEBIAN
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/72173	vdb-entry, x_refsource_BID
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T12:17:24.402Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "RHSA-2015:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "RHSA-2015:0264",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "name": "DSA-3323",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3323"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "72173",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72173"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-20T16:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "RHSA-2015:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "RHSA-2015:0264",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "name": "DSA-3323",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3323"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "72173",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72173"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-6585",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "RHSA-2015:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "RHSA-2015:0264",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474",
              "refsource": "CONFIRM",
              "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "DSA-3323",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3323"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "72173",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72173"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-6585",
    "datePublished": "2015-01-21T15:00:00",
    "dateReserved": "2014-09-17T00:00:00",
    "dateUpdated": "2024-08-06T12:17:24.402Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-0383

Vulnerability from cvelistv5

Published

2015-01-21 18:00

Modified

2024-08-06 04:10

Severity ?

Summary

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.

References

▼	URL	Tags
	https://exchange.xforce.ibmcloud.com/vulnerabilities/100148	vdb-entry, x_refsource_XF
	http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158810.html	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158791.html	vendor-advisory, x_refsource_FEDORA
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158088.html	vendor-advisory, x_refsource_FEDORA
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201603-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/72155	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:10:10.450Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oracle-cpujan2015-cve20150383(100148)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100148"
          },
          {
            "name": "FEDORA-2015-8251",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158810.html"
          },
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "FEDORA-2015-8226",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158791.html"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "FEDORA-2015-8264",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158088.html"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "72155",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72155"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-07T15:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "oracle-cpujan2015-cve20150383(100148)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100148"
        },
        {
          "name": "FEDORA-2015-8251",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158810.html"
        },
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "FEDORA-2015-8226",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158791.html"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "FEDORA-2015-8264",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158088.html"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "72155",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72155"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-0383",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oracle-cpujan2015-cve20150383(100148)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100148"
            },
            {
              "name": "FEDORA-2015-8251",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158810.html"
            },
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "FEDORA-2015-8226",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158791.html"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "FEDORA-2015-8264",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158088.html"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "72155",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72155"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-0383",
    "datePublished": "2015-01-21T18:00:00",
    "dateReserved": "2014-12-17T00:00:00",
    "dateUpdated": "2024-08-06T04:10:10.450Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-0410

Vulnerability from cvelistv5

Published

2015-01-21 18:00

Modified

2024-08-06 04:10

Severity ?

Summary

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0136.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0264.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	https://exchange.xforce.ibmcloud.com/vulnerabilities/100151	vdb-entry, x_refsource_XF
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/72165	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	https://www-304.ibm.com/support/docview.wss?uid=swg21695474	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	https://source.android.com/security/bulletin/2016-11-01.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	https://kc.mcafee.com/corporate/index?page=content&id=SB10104	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:10:10.536Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "RHSA-2015:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "RHSA-2015:0264",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "oracle-cpujan2015-cve20150410(100151)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100151"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "name": "72165",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72165"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2016-11-01.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10104"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-07T15:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "RHSA-2015:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "RHSA-2015:0264",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "oracle-cpujan2015-cve20150410(100151)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100151"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "name": "72165",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72165"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2016-11-01.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10104"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-0410",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "RHSA-2015:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "RHSA-2015:0264",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "oracle-cpujan2015-cve20150410(100151)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100151"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "72165",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72165"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474",
              "refsource": "CONFIRM",
              "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "https://source.android.com/security/bulletin/2016-11-01.html",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2016-11-01.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10104",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10104"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-0410",
    "datePublished": "2015-01-21T18:00:00",
    "dateReserved": "2014-12-17T00:00:00",
    "dateUpdated": "2024-08-06T04:10:10.536Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-0408

Vulnerability from cvelistv5

Published

2015-01-21 18:00

Modified

2024-08-06 04:10

Severity ?

Summary

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0136.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/72140	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0264.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201603-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	https://www-304.ibm.com/support/docview.wss?uid=swg21695474	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	https://exchange.xforce.ibmcloud.com/vulnerabilities/100142	vdb-entry, x_refsource_XF
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:10:10.926Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "RHSA-2015:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "name": "72140",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72140"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "RHSA-2015:0264",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "oracle-cpujan2015-cve20150408(100142)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100142"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-07T15:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "RHSA-2015:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "name": "72140",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72140"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "RHSA-2015:0264",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "oracle-cpujan2015-cve20150408(100142)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100142"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-0408",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "RHSA-2015:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "72140",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72140"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "RHSA-2015:0264",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474",
              "refsource": "CONFIRM",
              "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "oracle-cpujan2015-cve20150408(100142)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100142"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-0408",
    "datePublished": "2015-01-21T18:00:00",
    "dateReserved": "2014-12-17T00:00:00",
    "dateUpdated": "2024-08-06T04:10:10.926Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-0395

Vulnerability from cvelistv5

Published

2015-01-21 18:00

Modified

2024-08-06 04:10

Severity ?

Summary

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0136.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/72142	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2015-0264.html	vendor-advisory, x_refsource_REDHAT
	https://exchange.xforce.ibmcloud.com/vulnerabilities/100143	vdb-entry, x_refsource_XF
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201603-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	https://www-304.ibm.com/support/docview.wss?uid=swg21695474	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:10:10.451Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "RHSA-2015:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "72142",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72142"
          },
          {
            "name": "RHSA-2015:0264",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
          },
          {
            "name": "oracle-cpujan2015-cve20150395(100143)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100143"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-07T15:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "RHSA-2015:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "72142",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72142"
        },
        {
          "name": "RHSA-2015:0264",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
        },
        {
          "name": "oracle-cpujan2015-cve20150395(100143)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100143"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-0395",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "RHSA-2015:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "72142",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72142"
            },
            {
              "name": "RHSA-2015:0264",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
            },
            {
              "name": "oracle-cpujan2015-cve20150395(100143)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100143"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474",
              "refsource": "CONFIRM",
              "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-0395",
    "datePublished": "2015-01-21T18:00:00",
    "dateReserved": "2014-12-17T00:00:00",
    "dateUpdated": "2024-08-06T04:10:10.451Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-6593

Vulnerability from cvelistv5

Published

2015-01-21 15:00

Modified

2024-08-06 12:17

Severity ?

Summary

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0136.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	https://www.exploit-db.com/exploits/38641/	exploit, x_refsource_EXPLOIT-DB
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/72169	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0264.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://packetstormsecurity.com/files/134251/Java-Secure-Socket-Extension-JSSE-SKIP-TLS.html	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201603-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	https://www-304.ibm.com/support/docview.wss?uid=swg21695474	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	https://kc.mcafee.com/corporate/index?page=content&id=SB10104	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T12:17:24.361Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "RHSA-2015:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "name": "38641",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/38641/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "name": "72169",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72169"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "RHSA-2015:0264",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/134251/Java-Secure-Socket-Extension-JSSE-SKIP-TLS.html"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10104"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-30T16:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "RHSA-2015:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "name": "38641",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/38641/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "name": "72169",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72169"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "RHSA-2015:0264",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/134251/Java-Secure-Socket-Extension-JSSE-SKIP-TLS.html"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10104"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-6593",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "RHSA-2015:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "38641",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/38641/"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "72169",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72169"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "RHSA-2015:0264",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "http://packetstormsecurity.com/files/134251/Java-Secure-Socket-Extension-JSSE-SKIP-TLS.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/134251/Java-Secure-Socket-Extension-JSSE-SKIP-TLS.html"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474",
              "refsource": "CONFIRM",
              "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10104",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10104"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-6593",
    "datePublished": "2015-01-21T15:00:00",
    "dateReserved": "2014-09-17T00:00:00",
    "dateUpdated": "2024-08-06T12:17:24.361Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-6591

Vulnerability from cvelistv5

Published

2015-01-21 15:00

Modified

2024-08-06 12:17

Severity ?

Summary

Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0136.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0264.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/72175	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201603-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	https://www-304.ibm.com/support/docview.wss?uid=swg21695474	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T12:17:24.399Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "RHSA-2015:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "RHSA-2015:0264",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "72175",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72175"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-20T16:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "RHSA-2015:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "RHSA-2015:0264",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "72175",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72175"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-6591",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "RHSA-2015:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "RHSA-2015:0264",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "72175",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72175"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474",
              "refsource": "CONFIRM",
              "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-6591",
    "datePublished": "2015-01-21T15:00:00",
    "dateReserved": "2014-09-17T00:00:00",
    "dateUpdated": "2024-08-06T12:17:24.399Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-0407

Vulnerability from cvelistv5

Published

2015-01-21 18:00

Modified

2024-08-06 04:10

Severity ?

Summary

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0136.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0264.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	https://exchange.xforce.ibmcloud.com/vulnerabilities/100150	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/72162	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201603-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	https://www-304.ibm.com/support/docview.wss?uid=swg21695474	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:10:10.293Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "RHSA-2015:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "RHSA-2015:0264",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "name": "oracle-cpujan2015-cve20150407(100150)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100150"
          },
          {
            "name": "72162",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72162"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-07T15:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "RHSA-2015:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "RHSA-2015:0264",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "name": "oracle-cpujan2015-cve20150407(100150)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100150"
        },
        {
          "name": "72162",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72162"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-0407",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "RHSA-2015:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0136.html"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "RHSA-2015:0264",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "oracle-cpujan2015-cve20150407(100150)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100150"
            },
            {
              "name": "72162",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72162"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474",
              "refsource": "CONFIRM",
              "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-0407",
    "datePublished": "2015-01-21T18:00:00",
    "dateReserved": "2014-12-17T00:00:00",
    "dateUpdated": "2024-08-06T04:10:10.293Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-0412

Vulnerability from cvelistv5

Published

2015-01-21 19:00

Modified

2024-08-06 04:10

Severity ?

Summary

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/72136	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0264.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201603-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	https://exchange.xforce.ibmcloud.com/vulnerabilities/100140	vdb-entry, x_refsource_XF
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	https://www-304.ibm.com/support/docview.wss?uid=swg21695474	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:10:10.443Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "72136",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72136"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "RHSA-2015:0264",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "oracle-cpujan2015-cve20150412(100140)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100140"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-07T15:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "72136",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72136"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "RHSA-2015:0264",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "oracle-cpujan2015-cve20150412(100140)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100140"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-0412",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "72136",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72136"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "RHSA-2015:0264",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "oracle-cpujan2015-cve20150412(100140)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100140"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474",
              "refsource": "CONFIRM",
              "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-0412",
    "datePublished": "2015-01-21T19:00:00",
    "dateReserved": "2014-12-17T00:00:00",
    "dateUpdated": "2024-08-06T04:10:10.443Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-6587

Vulnerability from cvelistv5

Published

2015-01-21 15:00

Modified

2024-08-06 12:17

Severity ?

Summary

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0264.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201603-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	https://www-304.ibm.com/support/docview.wss?uid=swg21695474	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/72168	vdb-entry, x_refsource_BID
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T12:17:24.386Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "RHSA-2015:0264",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "name": "72168",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72168"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-20T16:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "RHSA-2015:0264",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "name": "72168",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72168"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-6587",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "RHSA-2015:0264",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474",
              "refsource": "CONFIRM",
              "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21695474"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "72168",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72168"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-6587",
    "datePublished": "2015-01-21T15:00:00",
    "dateReserved": "2014-09-17T00:00:00",
    "dateUpdated": "2024-08-06T12:17:24.386Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-6601

Vulnerability from cvelistv5

Published

2015-01-21 18:00

Modified

2024-08-06 12:24

Severity ?

Summary

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/72132	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201603-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031580	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T12:24:34.231Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "72132",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72132"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "name": "1031580",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031580"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-30T16:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "72132",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72132"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "name": "1031580",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031580"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-6601",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:0503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
            },
            {
              "name": "DSA-3144",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3144"
            },
            {
              "name": "RHSA-2015:0079",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "USN-2487-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2487-1"
            },
            {
              "name": "72132",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72132"
            },
            {
              "name": "RHSA-2015:0085",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
            },
            {
              "name": "RHSA-2015:0086",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "SUSE-SU-2015:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
            },
            {
              "name": "RHSA-2015:0080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
            },
            {
              "name": "RHSA-2015:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
            },
            {
              "name": "USN-2486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2486-1"
            },
            {
              "name": "GLSA-201507-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201507-14"
            },
            {
              "name": "SSRT101951",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "HPSBUX03281",
              "refsource": "HP",
              "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
            },
            {
              "name": "SSRT101968",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0190",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
            },
            {
              "name": "HPSBUX03273",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
            },
            {
              "name": "1031580",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031580"
            },
            {
              "name": "DSA-3147",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-6601",
    "datePublished": "2015-01-21T18:00:00",
    "dateReserved": "2014-09-17T00:00:00",
    "dateUpdated": "2024-08-06T12:24:34.231Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-3566

Vulnerability from cvelistv5

Published

2014-10-15 00:00

Modified

2024-11-27 19:31

Severity ?

Summary

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

References

▼	URL	Tags
	http://marc.info/?l=bugtraq&m=142103967620673&w=2	vendor-advisory, x_refsource_HP
	http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1031090	vdb-entry, x_refsource_SECTRACK
	http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2014-1880.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=142804214608580&w=2	vendor-advisory, x_refsource_HP
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635	x_refsource_CONFIRM
	http://www.kb.cert.org/vuls/id/577193	third-party-advisory, x_refsource_CERT-VN
	http://marc.info/?l=bugtraq&m=141577087123040&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=141715130023061&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html	vendor-advisory, x_refsource_SUSE
	https://support.apple.com/kb/HT6542	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1031106	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=141697638231025&w=2	vendor-advisory, x_refsource_HP
	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	x_refsource_CONFIRM
	http://marc.info/?l=openssl-dev&m=141333049205629&w=2	mailing-list, x_refsource_MLIST
	http://marc.info/?l=bugtraq&m=142350298616097&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142350743917559&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/60056	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2014-1877.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=141477196830952&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/61130	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2015-1546.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html	vendor-advisory, x_refsource_SUSE
	https://support.apple.com/kb/HT6529	x_refsource_CONFIRM
	https://www.openssl.org/news/secadv_20141015.txt	x_refsource_CONFIRM
	http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html	vendor-advisory, x_refsource_APPLE
	http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2014-1920.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1031087	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=143628269912142&w=2	vendor-advisory, x_refsource_HP
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667	x_refsource_CONFIRM
	https://bto.bluecoat.com/security-advisory/sa83	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=141879378918327&w=2	vendor-advisory, x_refsource_HP
	http://support.citrix.com/article/CTX200238	x_refsource_CONFIRM
	http://secunia.com/advisories/61359	third-party-advisory, x_refsource_SECUNIA
	https://support.apple.com/kb/HT6541	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1031093	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id/1031132	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3144	vendor-advisory, x_refsource_DEBIAN
	http://marc.info/?l=bugtraq&m=142721887231400&w=2	vendor-advisory, x_refsource_HP
	http://www.debian.org/security/2015/dsa-3253	vendor-advisory, x_refsource_DEBIAN
	http://marc.info/?l=bugtraq&m=142660345230545&w=2	vendor-advisory, x_refsource_HP
	http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034	x_refsource_CONFIRM
	https://www.suse.com/support/kb/doc.php?id=7015773	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/533724/100/0/threaded	vendor-advisory, x_refsource_APPLE
	https://www.elastic.co/blog/logstash-1-4-3-released	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142296755107581&w=2	vendor-advisory, x_refsource_HP
	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	x_refsource_CONFIRM
	http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html	x_refsource_MISC
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142805027510172&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/61827	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=141450452204552&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2015-0079.html	vendor-advisory, x_refsource_REDHAT
	http://www-01.ibm.com/support/docview.wss?uid=swg21688283	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142791032306609&w=2	vendor-advisory, x_refsource_HP
	https://technet.microsoft.com/library/security/3009008.aspx	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-1545.html	vendor-advisory, x_refsource_REDHAT
	https://www-01.ibm.com/support/docview.wss?uid=swg21688165	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142624619906067&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031094	vdb-entry, x_refsource_SECTRACK
	http://www.vmware.com/security/advisories/VMSA-2015-0003.html	x_refsource_CONFIRM
	http://secunia.com/advisories/61316	third-party-advisory, x_refsource_SECUNIA
	https://security.gentoo.org/glsa/201606-11	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2014-1881.html	vendor-advisory, x_refsource_REDHAT
	https://www.imperialviolet.org/2014/10/14/poodle.html	x_refsource_MISC
	http://www.securitytracker.com/id/1031096	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=142721887231400&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/61810	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=142660345230545&w=2	vendor-advisory, x_refsource_HP
	http://www.debian.org/security/2014/dsa-3053	vendor-advisory, x_refsource_DEBIAN
	http://marc.info/?l=bugtraq&m=142296755107581&w=2	vendor-advisory, x_refsource_HP
	https://support.lenovo.com/us/en/product_security/poodle	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1031107	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id/1031095	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=143290583027876&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142962817202793&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=143101048219218&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142118135300698&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031091	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=142495837901899&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031123	vdb-entry, x_refsource_SECTRACK
	http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566	x_refsource_MISC
	https://support.apple.com/HT205217	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1031092	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/61926	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2014-1876.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=142103967620673&w=2	vendor-advisory, x_refsource_HP
	http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=141450973807288&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=141814011518700&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=145983526810210&w=2	vendor-advisory, x_refsource_HP
	http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1076983	x_refsource_CONFIRM
	https://support.apple.com/kb/HT6531	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html	vendor-advisory, x_refsource_SUSE
	https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0264.html	vendor-advisory, x_refsource_REDHAT
	https://kc.mcafee.com/corporate/index?page=content&id=SB10091	x_refsource_CONFIRM
	https://support.apple.com/kb/HT6527	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142350196615714&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=141697676231104&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/60206	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=1152789	x_refsource_CONFIRM
	http://secunia.com/advisories/60792	third-party-advisory, x_refsource_SECUNIA
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html	vendor-advisory, x_refsource_APPLE
	http://www.debian.org/security/2016/dsa-3489	vendor-advisory, x_refsource_DEBIAN
	https://security.netapp.com/advisory/ntap-20141015-0001/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1031105	vdb-entry, x_refsource_SECTRACK
	https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id/1031131	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=141879378918327&w=2	vendor-advisory, x_refsource_HP
	http://www.ubuntu.com/usn/USN-2487-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=bugtraq&m=142740155824959&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=141813976718456&w=2	vendor-advisory, x_refsource_HP
	https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html	x_refsource_MISC
	http://www.securitytracker.com/id/1031130	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=142721830231196&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=141577350823734&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2014-1948.html	vendor-advisory, x_refsource_REDHAT
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://marc.info/?l=bugtraq&m=141620103726640&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2014-1653.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=144101915224472&w=2	vendor-advisory, x_refsource_HP
	http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431	x_refsource_CONFIRM
	http://support.apple.com/HT204244	x_refsource_CONFIRM
	http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142624679706236&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2015-0085.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	x_refsource_CONFIRM
	https://support.apple.com/kb/HT6536	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html	vendor-advisory, x_refsource_FEDORA
	http://marc.info/?l=bugtraq&m=141576815022399&w=2	vendor-advisory, x_refsource_HP
	https://groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=141477196830952&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=143290371927178&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2014-1652.html	vendor-advisory, x_refsource_REDHAT
	https://support.apple.com/kb/HT6535	x_refsource_CONFIRM
	https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142546741516006&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2015-0086.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=143039249603103&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031124	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-0080.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=142740155824959&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2014-1882.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0068.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=142354438527235&w=2	vendor-advisory, x_refsource_HP
	http://www.ubuntu.com/usn/USN-2486-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=bugtraq&m=144294141001552&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/59627	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=141814011518700&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142495837901899&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=141694355519663&w=2	vendor-advisory, x_refsource_HP
	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=143290437727362&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142350298616097&w=2	vendor-advisory, x_refsource_HP
	https://support.lenovo.com/product_security/poodle	x_refsource_CONFIRM
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle	vendor-advisory, x_refsource_CISCO
	http://marc.info/?l=bugtraq&m=141775427104070&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2015-0698.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html	vendor-advisory, x_refsource_SUSE
	http://downloads.asterisk.org/pub/security/AST-2014-011.html	x_refsource_CONFIRM
	http://secunia.com/advisories/60859	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/533746	vendor-advisory, x_refsource_APPLE
	https://security.gentoo.org/glsa/201507-14	vendor-advisory, x_refsource_GENTOO
	http://marc.info/?l=bugtraq&m=142624719706349&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/61345	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=143101048219218&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/61019	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/70574	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1031120	vdb-entry, x_refsource_SECTRACK
	https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	x_refsource_CONFIRM
	http://secunia.com/advisories/61825	third-party-advisory, x_refsource_SECUNIA
	http://advisories.mageia.org/MGASA-2014-0416.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1031029	vdb-entry, x_refsource_SECTRACK
	http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142624719706349&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142624590206005&w=2	vendor-advisory, x_refsource_HP
	https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=143290522027658&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://kc.mcafee.com/corporate/index?page=content&id=SB10104	x_refsource_CONFIRM
	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705	x_refsource_CONFIRM
	http://secunia.com/advisories/61782	third-party-advisory, x_refsource_SECUNIA
	https://access.redhat.com/articles/1232123	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:062	vendor-advisory, x_refsource_MANDRIVA
	http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id/1031085	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=144251162130364&w=2	vendor-advisory, x_refsource_HP
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=143039249603103&w=2	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/archive/1/533747	vendor-advisory, x_refsource_APPLE
	http://marc.info/?l=bugtraq&m=142118135300698&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142624679706236&w=2	vendor-advisory, x_refsource_HP
	http://www-01.ibm.com/support/docview.wss?uid=swg21687611	x_refsource_CONFIRM
	https://github.com/mpgn/poodle-PoC	x_refsource_MISC
	http://www.mandriva.com/security/advisories?name=MDVSA-2014:203	vendor-advisory, x_refsource_MANDRIVA
	http://marc.info/?l=bugtraq&m=142118135300698&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142607790919348&w=2	vendor-advisory, x_refsource_HP
	http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html	x_refsource_MISC
	https://support.citrix.com/article/CTX216642	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142354438527235&w=2	vendor-advisory, x_refsource_HP
	https://puppet.com/security/cve/poodle-sslv3-vulnerability	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/61303	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=142350743917559&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=142496355704097&w=2	vendor-advisory, x_refsource_HP
	http://www-01.ibm.com/support/docview.wss?uid=swg21692299	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1031039	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html	vendor-advisory, x_refsource_SUSE
	http://www-01.ibm.com/support/docview.wss?uid=swg21687172	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142721830231196&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://marc.info/?l=bugtraq&m=142624619906067	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031089	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=142350196615714&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=141628688425177&w=2	vendor-advisory, x_refsource_HP
	http://www.us-cert.gov/ncas/alerts/TA14-290A	third-party-advisory, x_refsource_CERT
	http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/61819	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=142357976805598&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031088	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3147	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/61995	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=141703183219781&w=2	vendor-advisory, x_refsource_HP
	http://www-01.ibm.com/support/docview.wss?uid=swg21686997	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10090	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=142357976805598&w=2	vendor-advisory, x_refsource_HP
	http://www.securitytracker.com/id/1031086	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=143558192010071&w=2	vendor-advisory, x_refsource_HP
	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2014-1692.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html	vendor-advisory, x_refsource_FEDORA
	https://www.openssl.org/~bodo/ssl-poodle.pdf	x_refsource_MISC
	http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=143558137709884&w=2	vendor-advisory, x_refsource_HP
	https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E	mailing-list, x_refsource_MLIST
	https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7	x_refsource_MISC

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-11-27T19:31:57.733Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://templatelab.com/ssl-poodle/"
          },
          {
            "name": "HPSBOV03227",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142103967620673\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc"
          },
          {
            "name": "1031090",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031090"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/"
          },
          {
            "name": "RHSA-2014:1880",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1880.html"
          },
          {
            "name": "HPSBHF03300",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142804214608580\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635"
          },
          {
            "name": "VU#577193",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/577193"
          },
          {
            "name": "HPSBMU03184",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141577087123040\u0026w=2"
          },
          {
            "name": "HPSBGN03209",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141715130023061\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2014:1331",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT6542"
          },
          {
            "name": "1031106",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031106"
          },
          {
            "name": "HPSBGN03201",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141697638231025\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "[openssl-dev] 20141014 Patch to mitigate CVE-2014-3566 (\"POODLE\")",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openssl-dev\u0026m=141333049205629\u0026w=2"
          },
          {
            "name": "SSRT101898",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142350298616097\u0026w=2"
          },
          {
            "name": "SSRT101896",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142350743917559\u0026w=2"
          },
          {
            "name": "60056",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60056"
          },
          {
            "name": "RHSA-2014:1877",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1877.html"
          },
          {
            "name": "HPSBUX03162",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141477196830952\u0026w=2"
          },
          {
            "name": "61130",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61130"
          },
          {
            "name": "RHSA-2015:1546",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1546.html"
          },
          {
            "name": "SUSE-SU-2015:0503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT6529"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.openssl.org/news/secadv_20141015.txt"
          },
          {
            "name": "APPLE-SA-2014-10-16-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"
          },
          {
            "name": "RHSA-2014:1920",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1920.html"
          },
          {
            "name": "1031087",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031087"
          },
          {
            "name": "HPSBMU03234",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143628269912142\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa83"
          },
          {
            "name": "SSRT101849",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141879378918327\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.citrix.com/article/CTX200238"
          },
          {
            "name": "61359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61359"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT6541"
          },
          {
            "name": "1031093",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031093"
          },
          {
            "name": "1031132",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031132"
          },
          {
            "name": "DSA-3144",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3144"
          },
          {
            "name": "SSRT101790",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142721887231400\u0026w=2"
          },
          {
            "name": "DSA-3253",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3253"
          },
          {
            "name": "SSRT101846",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142660345230545\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.suse.com/support/kb/doc.php?id=7015773"
          },
          {
            "name": "APPLE-SA-2014-10-16-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/533724/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.elastic.co/blog/logstash-1-4-3-released"
          },
          {
            "name": "SSRT101854",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142296755107581\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946"
          },
          {
            "name": "HPSBST03195",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142805027510172\u0026w=2"
          },
          {
            "name": "61827",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61827"
          },
          {
            "name": "HPSBMU03152",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141450452204552\u0026w=2"
          },
          {
            "name": "RHSA-2015:0079",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21688283"
          },
          {
            "name": "HPSBMU03304",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142791032306609\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://technet.microsoft.com/library/security/3009008.aspx"
          },
          {
            "name": "RHSA-2015:1545",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1545.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21688165"
          },
          {
            "name": "HPSBMU03259",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142624619906067\u0026w=2"
          },
          {
            "name": "1031094",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031094"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
          },
          {
            "name": "61316",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61316"
          },
          {
            "name": "GLSA-201606-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-11"
          },
          {
            "name": "RHSA-2014:1881",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1881.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.imperialviolet.org/2014/10/14/poodle.html"
          },
          {
            "name": "1031096",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031096"
          },
          {
            "name": "HPSBHF03275",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142721887231400\u0026w=2"
          },
          {
            "name": "61810",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61810"
          },
          {
            "name": "HPSBHF03293",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142660345230545\u0026w=2"
          },
          {
            "name": "DSA-3053",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3053"
          },
          {
            "name": "HPSBGN03237",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142296755107581\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/poodle"
          },
          {
            "name": "1031107",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031107"
          },
          {
            "name": "1031095",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031095"
          },
          {
            "name": "HPSBMU03223",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143290583027876\u0026w=2"
          },
          {
            "name": "SUSE-SU-2014:1549",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html"
          },
          {
            "name": "HPSBGN03305",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142962817202793\u0026w=2"
          },
          {
            "name": "HPSBUX03194",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143101048219218\u0026w=2"
          },
          {
            "name": "SSRT101868",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
          },
          {
            "name": "1031091",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031091"
          },
          {
            "name": "HPSBMU03260",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142495837901899\u0026w=2"
          },
          {
            "name": "1031123",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205217"
          },
          {
            "name": "1031092",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031092"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "SUSE-SU-2015:0376",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html"
          },
          {
            "name": "61926",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61926"
          },
          {
            "name": "RHSA-2014:1876",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1876.html"
          },
          {
            "name": "SSRT101779",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142103967620673\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html"
          },
          {
            "name": "HPSBHF03156",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141450973807288\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2016:0640",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "SSRT101838",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141814011518700\u0026w=2"
          },
          {
            "name": "HPSBGN03569",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=145983526810210\u0026w=2"
          },
          {
            "name": "APPLE-SA-2015-09-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1076983"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT6531"
          },
          {
            "name": "SUSE-SU-2014:1357",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip"
          },
          {
            "name": "RHSA-2015:0264",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10091"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT6527"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html"
          },
          {
            "name": "SSRT101897",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142350196615714\u0026w=2"
          },
          {
            "name": "HPSBGN03203",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141697676231104\u0026w=2"
          },
          {
            "name": "60206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60206"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152789"
          },
          {
            "name": "60792",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60792"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "APPLE-SA-2014-10-16-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html"
          },
          {
            "name": "DSA-3489",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3489"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20141015-0001/"
          },
          {
            "name": "1031105",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031105"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html"
          },
          {
            "name": "FEDORA-2014-13069",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html"
          },
          {
            "name": "1031131",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031131"
          },
          {
            "name": "HPSBMU03221",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141879378918327\u0026w=2"
          },
          {
            "name": "USN-2487-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2487-1"
          },
          {
            "name": "SSRT101795",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142740155824959\u0026w=2"
          },
          {
            "name": "HPSBGN03222",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141813976718456\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html"
          },
          {
            "name": "1031130",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031130"
          },
          {
            "name": "HPSBMU03301",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142721830231196\u0026w=2"
          },
          {
            "name": "HPSBGN03164",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141577350823734\u0026w=2"
          },
          {
            "name": "RHSA-2014:1948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1948.html"
          },
          {
            "name": "NetBSD-SA2014-015",
            "tags": [
              "vendor-advisory",
              "x_refsource_NETBSD",
              "x_transferred"
            ],
            "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc"
          },
          {
            "name": "HPSBGN03192",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141620103726640\u0026w=2"
          },
          {
            "name": "RHSA-2014:1653",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1653.html"
          },
          {
            "name": "SUSE-SU-2015:0392",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html"
          },
          {
            "name": "HPSBMU03416",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144101915224472\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/HT204244"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx"
          },
          {
            "name": "HPSBMU03283",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142624679706236\u0026w=2"
          },
          {
            "name": "RHSA-2015:0085",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT6536"
          },
          {
            "name": "FEDORA-2014-12951",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html"
          },
          {
            "name": "HPSBGN03191",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141576815022399\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU"
          },
          {
            "name": "SSRT101767",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141477196830952\u0026w=2"
          },
          {
            "name": "SUSE-SU-2014:1526",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html"
          },
          {
            "name": "HPSBGN03332",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143290371927178\u0026w=2"
          },
          {
            "name": "RHSA-2014:1652",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1652.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT6535"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02"
          },
          {
            "name": "SUSE-SU-2015:0345",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html"
          },
          {
            "name": "HPSBST03265",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142546741516006\u0026w=2"
          },
          {
            "name": "RHSA-2015:0086",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
          },
          {
            "name": "HPSBMU03241",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143039249603103\u0026w=2"
          },
          {
            "name": "1031124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031124"
          },
          {
            "name": "SUSE-SU-2015:0578",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html"
          },
          {
            "name": "SUSE-SU-2015:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
          },
          {
            "name": "RHSA-2015:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
          },
          {
            "name": "HPSBMU03294",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142740155824959\u0026w=2"
          },
          {
            "name": "RHSA-2014:1882",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1882.html"
          },
          {
            "name": "RHSA-2015:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
          },
          {
            "name": "HPSBGN03251",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142354438527235\u0026w=2"
          },
          {
            "name": "USN-2486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2486-1"
          },
          {
            "name": "HPSBGN03391",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144294141001552\u0026w=2"
          },
          {
            "name": "59627",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59627"
          },
          {
            "name": "HPSBGN03208",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141814011518700\u0026w=2"
          },
          {
            "name": "SSRT101894",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142495837901899\u0026w=2"
          },
          {
            "name": "HPSBMU03214",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141694355519663\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
          },
          {
            "name": "HPSBMU03263",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143290437727362\u0026w=2"
          },
          {
            "name": "HPSBGN03254",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142350298616097\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/product_security/poodle"
          },
          {
            "name": "20141014 SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle"
          },
          {
            "name": "HPSBGN03205",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141775427104070\u0026w=2"
          },
          {
            "name": "RHSA-2015:0698",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0698.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "SUSE-SU-2014:1361",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://downloads.asterisk.org/pub/security/AST-2014-011.html"
          },
          {
            "name": "60859",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60859"
          },
          {
            "name": "APPLE-SA-2014-10-20-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/533746"
          },
          {
            "name": "GLSA-201507-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201507-14"
          },
          {
            "name": "SSRT101921",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142624719706349\u0026w=2"
          },
          {
            "name": "SSRT101951",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm"
          },
          {
            "name": "61345",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61345"
          },
          {
            "name": "SSRT101834",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143101048219218\u0026w=2"
          },
          {
            "name": "61019",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61019"
          },
          {
            "name": "70574",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/70574"
          },
          {
            "name": "1031120",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031120"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
          },
          {
            "name": "61825",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61825"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2014-0416.html"
          },
          {
            "name": "1031029",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031029"
          },
          {
            "name": "HPSBUX03281",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
          },
          {
            "name": "HPSBMU03262",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142624719706349\u0026w=2"
          },
          {
            "name": "HPSBMU03267",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142624590206005\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681"
          },
          {
            "name": "HPSBMU03261",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143290522027658\u0026w=2"
          },
          {
            "name": "SUSE-SU-2016:1459",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10104"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
          },
          {
            "name": "61782",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61782"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/articles/1232123"
          },
          {
            "name": "MDVSA-2015:062",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062"
          },
          {
            "name": "FEDORA-2015-9110",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html"
          },
          {
            "name": "1031085",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031085"
          },
          {
            "name": "HPSBST03418",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144251162130364\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "SSRT101892",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143039249603103\u0026w=2"
          },
          {
            "name": "APPLE-SA-2014-10-20-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/533747"
          },
          {
            "name": "HPSBGN03233",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
          },
          {
            "name": "SSRT101916",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142624679706236\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687611"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/mpgn/poodle-PoC"
          },
          {
            "name": "MDVSA-2014:203",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:203"
          },
          {
            "name": "SSRT101739",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
          },
          {
            "name": "SSRT101968",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX216642"
          },
          {
            "name": "SSRT101899",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142354438527235\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://puppet.com/security/cve/poodle-sslv3-vulnerability"
          },
          {
            "name": "openSUSE-SU-2015:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
          },
          {
            "name": "APPLE-SA-2015-01-27-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html"
          },
          {
            "name": "61303",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61303"
          },
          {
            "name": "HPSBGN03252",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142350743917559\u0026w=2"
          },
          {
            "name": "HPSBUX03273",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21692299"
          },
          {
            "name": "1031039",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031039"
          },
          {
            "name": "SUSE-SU-2016:1457",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687172"
          },
          {
            "name": "SSRT101998",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142721830231196\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0344",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html"
          },
          {
            "name": "SSRT101922",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142624619906067"
          },
          {
            "name": "1031089",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031089"
          },
          {
            "name": "HPSBGN03253",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142350196615714\u0026w=2"
          },
          {
            "name": "HPSBMU03183",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141628688425177\u0026w=2"
          },
          {
            "name": "TA14-290A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA14-290A"
          },
          {
            "name": "FEDORA-2014-13012",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html"
          },
          {
            "name": "61819",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61819"
          },
          {
            "name": "HPSBGN03255",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142357976805598\u0026w=2"
          },
          {
            "name": "1031088",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031088"
          },
          {
            "name": "DSA-3147",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3147"
          },
          {
            "name": "61995",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61995"
          },
          {
            "name": "HPSBGN03202",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141703183219781\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686997"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10090"
          },
          {
            "name": "SSRT101928",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=142357976805598\u0026w=2"
          },
          {
            "name": "1031086",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031086"
          },
          {
            "name": "HPSBPI03360",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143558192010071\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
          },
          {
            "name": "RHSA-2014:1692",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1692.html"
          },
          {
            "name": "FEDORA-2015-9090",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openssl.org/~bodo/ssl-poodle.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439"
          },
          {
            "name": "HPSBPI03107",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143558137709884\u0026w=2"
          },
          {
            "name": "[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E"
          },
          {
            "name": "[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E"
          },
          {
            "name": "[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E"
          },
          {
            "name": "[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E"
          },
          {
            "name": "[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E"
          },
          {
            "name": "[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-05T16:29:26",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "HPSBOV03227",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142103967620673\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc"
        },
        {
          "name": "1031090",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031090"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/"
        },
        {
          "name": "RHSA-2014:1880",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1880.html"
        },
        {
          "name": "HPSBHF03300",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142804214608580\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635"
        },
        {
          "name": "VU#577193",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/577193"
        },
        {
          "name": "HPSBMU03184",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141577087123040\u0026w=2"
        },
        {
          "name": "HPSBGN03209",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141715130023061\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2014:1331",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT6542"
        },
        {
          "name": "1031106",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031106"
        },
        {
          "name": "HPSBGN03201",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141697638231025\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "[openssl-dev] 20141014 Patch to mitigate CVE-2014-3566 (\"POODLE\")",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=openssl-dev\u0026m=141333049205629\u0026w=2"
        },
        {
          "name": "SSRT101898",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142350298616097\u0026w=2"
        },
        {
          "name": "SSRT101896",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142350743917559\u0026w=2"
        },
        {
          "name": "60056",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60056"
        },
        {
          "name": "RHSA-2014:1877",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1877.html"
        },
        {
          "name": "HPSBUX03162",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141477196830952\u0026w=2"
        },
        {
          "name": "61130",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61130"
        },
        {
          "name": "RHSA-2015:1546",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1546.html"
        },
        {
          "name": "SUSE-SU-2015:0503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT6529"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.openssl.org/news/secadv_20141015.txt"
        },
        {
          "name": "APPLE-SA-2014-10-16-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"
        },
        {
          "name": "RHSA-2014:1920",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1920.html"
        },
        {
          "name": "1031087",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031087"
        },
        {
          "name": "HPSBMU03234",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143628269912142\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa83"
        },
        {
          "name": "SSRT101849",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141879378918327\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.citrix.com/article/CTX200238"
        },
        {
          "name": "61359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61359"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT6541"
        },
        {
          "name": "1031093",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031093"
        },
        {
          "name": "1031132",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031132"
        },
        {
          "name": "DSA-3144",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3144"
        },
        {
          "name": "SSRT101790",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142721887231400\u0026w=2"
        },
        {
          "name": "DSA-3253",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3253"
        },
        {
          "name": "SSRT101846",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142660345230545\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.suse.com/support/kb/doc.php?id=7015773"
        },
        {
          "name": "APPLE-SA-2014-10-16-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://www.securityfocus.com/archive/1/533724/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.elastic.co/blog/logstash-1-4-3-released"
        },
        {
          "name": "SSRT101854",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142296755107581\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946"
        },
        {
          "name": "HPSBST03195",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142805027510172\u0026w=2"
        },
        {
          "name": "61827",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61827"
        },
        {
          "name": "HPSBMU03152",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141450452204552\u0026w=2"
        },
        {
          "name": "RHSA-2015:0079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21688283"
        },
        {
          "name": "HPSBMU03304",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142791032306609\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://technet.microsoft.com/library/security/3009008.aspx"
        },
        {
          "name": "RHSA-2015:1545",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1545.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21688165"
        },
        {
          "name": "HPSBMU03259",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142624619906067\u0026w=2"
        },
        {
          "name": "1031094",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031094"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html"
        },
        {
          "name": "61316",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61316"
        },
        {
          "name": "GLSA-201606-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-11"
        },
        {
          "name": "RHSA-2014:1881",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1881.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.imperialviolet.org/2014/10/14/poodle.html"
        },
        {
          "name": "1031096",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031096"
        },
        {
          "name": "HPSBHF03275",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142721887231400\u0026w=2"
        },
        {
          "name": "61810",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61810"
        },
        {
          "name": "HPSBHF03293",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142660345230545\u0026w=2"
        },
        {
          "name": "DSA-3053",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3053"
        },
        {
          "name": "HPSBGN03237",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142296755107581\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/poodle"
        },
        {
          "name": "1031107",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031107"
        },
        {
          "name": "1031095",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031095"
        },
        {
          "name": "HPSBMU03223",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143290583027876\u0026w=2"
        },
        {
          "name": "SUSE-SU-2014:1549",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html"
        },
        {
          "name": "HPSBGN03305",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142962817202793\u0026w=2"
        },
        {
          "name": "HPSBUX03194",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143101048219218\u0026w=2"
        },
        {
          "name": "SSRT101868",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
        },
        {
          "name": "1031091",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031091"
        },
        {
          "name": "HPSBMU03260",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142495837901899\u0026w=2"
        },
        {
          "name": "1031123",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205217"
        },
        {
          "name": "1031092",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031092"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "SUSE-SU-2015:0376",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html"
        },
        {
          "name": "61926",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61926"
        },
        {
          "name": "RHSA-2014:1876",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1876.html"
        },
        {
          "name": "SSRT101779",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142103967620673\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html"
        },
        {
          "name": "HPSBHF03156",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141450973807288\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2016:0640",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "SSRT101838",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141814011518700\u0026w=2"
        },
        {
          "name": "HPSBGN03569",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=145983526810210\u0026w=2"
        },
        {
          "name": "APPLE-SA-2015-09-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1076983"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT6531"
        },
        {
          "name": "SUSE-SU-2014:1357",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip"
        },
        {
          "name": "RHSA-2015:0264",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10091"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT6527"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html"
        },
        {
          "name": "SSRT101897",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142350196615714\u0026w=2"
        },
        {
          "name": "HPSBGN03203",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141697676231104\u0026w=2"
        },
        {
          "name": "60206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60206"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152789"
        },
        {
          "name": "60792",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60792"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "APPLE-SA-2014-10-16-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html"
        },
        {
          "name": "DSA-3489",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3489"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20141015-0001/"
        },
        {
          "name": "1031105",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031105"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html"
        },
        {
          "name": "FEDORA-2014-13069",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html"
        },
        {
          "name": "1031131",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031131"
        },
        {
          "name": "HPSBMU03221",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141879378918327\u0026w=2"
        },
        {
          "name": "USN-2487-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2487-1"
        },
        {
          "name": "SSRT101795",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142740155824959\u0026w=2"
        },
        {
          "name": "HPSBGN03222",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141813976718456\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html"
        },
        {
          "name": "1031130",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031130"
        },
        {
          "name": "HPSBMU03301",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142721830231196\u0026w=2"
        },
        {
          "name": "HPSBGN03164",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141577350823734\u0026w=2"
        },
        {
          "name": "RHSA-2014:1948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1948.html"
        },
        {
          "name": "NetBSD-SA2014-015",
          "tags": [
            "vendor-advisory",
            "x_refsource_NETBSD"
          ],
          "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc"
        },
        {
          "name": "HPSBGN03192",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141620103726640\u0026w=2"
        },
        {
          "name": "RHSA-2014:1653",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1653.html"
        },
        {
          "name": "SUSE-SU-2015:0392",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html"
        },
        {
          "name": "HPSBMU03416",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144101915224472\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/HT204244"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx"
        },
        {
          "name": "HPSBMU03283",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142624679706236\u0026w=2"
        },
        {
          "name": "RHSA-2015:0085",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT6536"
        },
        {
          "name": "FEDORA-2014-12951",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html"
        },
        {
          "name": "HPSBGN03191",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141576815022399\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU"
        },
        {
          "name": "SSRT101767",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141477196830952\u0026w=2"
        },
        {
          "name": "SUSE-SU-2014:1526",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html"
        },
        {
          "name": "HPSBGN03332",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143290371927178\u0026w=2"
        },
        {
          "name": "RHSA-2014:1652",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1652.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT6535"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02"
        },
        {
          "name": "SUSE-SU-2015:0345",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html"
        },
        {
          "name": "HPSBST03265",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142546741516006\u0026w=2"
        },
        {
          "name": "RHSA-2015:0086",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html"
        },
        {
          "name": "HPSBMU03241",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143039249603103\u0026w=2"
        },
        {
          "name": "1031124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031124"
        },
        {
          "name": "SUSE-SU-2015:0578",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html"
        },
        {
          "name": "SUSE-SU-2015:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html"
        },
        {
          "name": "RHSA-2015:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html"
        },
        {
          "name": "HPSBMU03294",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142740155824959\u0026w=2"
        },
        {
          "name": "RHSA-2014:1882",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1882.html"
        },
        {
          "name": "RHSA-2015:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html"
        },
        {
          "name": "HPSBGN03251",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142354438527235\u0026w=2"
        },
        {
          "name": "USN-2486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2486-1"
        },
        {
          "name": "HPSBGN03391",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144294141001552\u0026w=2"
        },
        {
          "name": "59627",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59627"
        },
        {
          "name": "HPSBGN03208",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141814011518700\u0026w=2"
        },
        {
          "name": "SSRT101894",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142495837901899\u0026w=2"
        },
        {
          "name": "HPSBMU03214",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141694355519663\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
        },
        {
          "name": "HPSBMU03263",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143290437727362\u0026w=2"
        },
        {
          "name": "HPSBGN03254",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142350298616097\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/product_security/poodle"
        },
        {
          "name": "20141014 SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle"
        },
        {
          "name": "HPSBGN03205",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141775427104070\u0026w=2"
        },
        {
          "name": "RHSA-2015:0698",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0698.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "SUSE-SU-2014:1361",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://downloads.asterisk.org/pub/security/AST-2014-011.html"
        },
        {
          "name": "60859",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60859"
        },
        {
          "name": "APPLE-SA-2014-10-20-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://www.securityfocus.com/archive/1/533746"
        },
        {
          "name": "GLSA-201507-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201507-14"
        },
        {
          "name": "SSRT101921",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142624719706349\u0026w=2"
        },
        {
          "name": "SSRT101951",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm"
        },
        {
          "name": "61345",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61345"
        },
        {
          "name": "SSRT101834",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143101048219218\u0026w=2"
        },
        {
          "name": "61019",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61019"
        },
        {
          "name": "70574",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/70574"
        },
        {
          "name": "1031120",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031120"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
        },
        {
          "name": "61825",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61825"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2014-0416.html"
        },
        {
          "name": "1031029",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031029"
        },
        {
          "name": "HPSBUX03281",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581"
        },
        {
          "name": "HPSBMU03262",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142624719706349\u0026w=2"
        },
        {
          "name": "HPSBMU03267",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142624590206005\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681"
        },
        {
          "name": "HPSBMU03261",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143290522027658\u0026w=2"
        },
        {
          "name": "SUSE-SU-2016:1459",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10104"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
        },
        {
          "name": "61782",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61782"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://access.redhat.com/articles/1232123"
        },
        {
          "name": "MDVSA-2015:062",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062"
        },
        {
          "name": "FEDORA-2015-9110",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html"
        },
        {
          "name": "1031085",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031085"
        },
        {
          "name": "HPSBST03418",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144251162130364\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        },
        {
          "name": "SSRT101892",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143039249603103\u0026w=2"
        },
        {
          "name": "APPLE-SA-2014-10-20-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://www.securityfocus.com/archive/1/533747"
        },
        {
          "name": "HPSBGN03233",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
        },
        {
          "name": "SSRT101916",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142624679706236\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687611"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/mpgn/poodle-PoC"
        },
        {
          "name": "MDVSA-2014:203",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:203"
        },
        {
          "name": "SSRT101739",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
        },
        {
          "name": "SSRT101968",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142607790919348\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX216642"
        },
        {
          "name": "SSRT101899",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142354438527235\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://puppet.com/security/cve/poodle-sslv3-vulnerability"
        },
        {
          "name": "openSUSE-SU-2015:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html"
        },
        {
          "name": "APPLE-SA-2015-01-27-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html"
        },
        {
          "name": "61303",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61303"
        },
        {
          "name": "HPSBGN03252",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142350743917559\u0026w=2"
        },
        {
          "name": "HPSBUX03273",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142496355704097\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21692299"
        },
        {
          "name": "1031039",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031039"
        },
        {
          "name": "SUSE-SU-2016:1457",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687172"
        },
        {
          "name": "SSRT101998",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142721830231196\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0344",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html"
        },
        {
          "name": "SSRT101922",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142624619906067"
        },
        {
          "name": "1031089",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031089"
        },
        {
          "name": "HPSBGN03253",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142350196615714\u0026w=2"
        },
        {
          "name": "HPSBMU03183",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141628688425177\u0026w=2"
        },
        {
          "name": "TA14-290A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA14-290A"
        },
        {
          "name": "FEDORA-2014-13012",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html"
        },
        {
          "name": "61819",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61819"
        },
        {
          "name": "HPSBGN03255",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142357976805598\u0026w=2"
        },
        {
          "name": "1031088",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031088"
        },
        {
          "name": "DSA-3147",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3147"
        },
        {
          "name": "61995",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61995"
        },
        {
          "name": "HPSBGN03202",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141703183219781\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686997"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10090"
        },
        {
          "name": "SSRT101928",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=142357976805598\u0026w=2"
        },
        {
          "name": "1031086",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031086"
        },
        {
          "name": "HPSBPI03360",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143558192010071\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
        },
        {
          "name": "RHSA-2014:1692",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1692.html"
        },
        {
          "name": "FEDORA-2015-9090",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openssl.org/~bodo/ssl-poodle.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439"
        },
        {
          "name": "HPSBPI03107",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143558137709884\u0026w=2"
        },
        {
          "name": "[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E"
        },
        {
          "name": "[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E"
        },
        {
          "name": "[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E"
        },
        {
          "name": "[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E"
        },
        {
          "name": "[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E"
        },
        {
          "name": "[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3566",
    "datePublished": "2014-10-15T00:00:00",
    "dateReserved": "2014-05-14T00:00:00",
    "dateUpdated": "2024-11-27T19:31:57.733Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature