RHSA-2013:1014: java-1.6.0-openjdk security update

TI-2013-02212 CVE-2013-2465 · GHSA-498p-qg8p-wgxg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98773 Published 2013-06-18 Fixed CWE-693

TI-2013-02219 CVE-2013-2472 · GHSA-gjv2-jp2h-jxjh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-02217 CVE-2013-2470 · GHSA-x8gh-hfwx-cvcw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-02218 CVE-2013-2471 · GHSA-527c-rv7j-wxgp

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 59

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.15022 Published 2013-06-18 Fixed

TI-2013-01378 CVE-2013-1571 · GHSA-hq68-fx39-9xch

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and…

MEDIUM 56

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to af…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.66921 Published 2013-06-18 Fixed

TI-2013-02210 CVE-2013-2463 · GHSA-c2vj-w5wr-j285

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 55

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10179 Published 2013-06-18 Fixed

TI-2013-02220 CVE-2013-2473 · GHSA-rqv8-fh49-xr2f

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07498 Published 2013-06-18 Fixed

TI-2013-02216 CVE-2013-2469 · GHSA-mx3f-824w-q245

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07133 Published 2013-06-18 Fixed

TI-2013-02206 CVE-2013-2459 · GHSA-v8cv-cpwg-mmmf

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07437 Published 2013-06-18 Fixed

TI-2013-02192 CVE-2013-2445 · GHSA-wphf-wxvh-vmjg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.05725 Published 2013-06-18 Fixed

TI-2013-02208 CVE-2013-2461 · GHSA-xp47-mpxp-9h7v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlie…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06746 Published 2013-06-18 Fixed

TI-2013-02195 CVE-2013-2448 · GHSA-p22p-5jvr-whv6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05571 Published 2013-06-18 Fixed

TI-2013-02154 CVE-2013-2407 · GHSA-gf86-x7w3-vm22

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 37

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availa…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.05209 Published 2013-06-18 Fixed

TI-2013-02197 CVE-2013-2450 · GHSA-h4m3-84wr-c7xg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05084 Published 2013-06-18 Fixed

TI-2013-02191 CVE-2013-2444 · GHSA-v66j-q7ff-pvwx

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04874 Published 2013-06-18 Fixed

TI-2013-02159 CVE-2013-2412 · GHSA-434m-x855-gvj6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknow…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04823 Published 2013-06-18 Fixed

TI-2013-02204 CVE-2013-2457 · GHSA-m3ch-223f-43c6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04507 Published 2013-06-18 Fixed

TI-2013-02203 CVE-2013-2456 · GHSA-r2jw-6w2w-mv45

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04512 Published 2013-06-18 Fixed

TI-2013-02202 CVE-2013-2455 · GHSA-w6fp-3665-fq2r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02200 CVE-2013-2453 · GHSA-6v99-2p53-chqj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04552 Published 2013-06-18 Fixed

TI-2013-02199 CVE-2013-2452 · GHSA-mj6j-2m32-x38f

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02194 CVE-2013-2447 · GHSA-6q4g-vp2w-v6q7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02193 CVE-2013-2446 · GHSA-j2x7-qpr3-72q2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04446 Published 2013-06-18 Fixed

TI-2013-02190 CVE-2013-2443 · GHSA-x452-rm6w-q6xw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04586 Published 2013-06-18 Partial fix

TI-2013-01307 CVE-2013-1500 · GHSA-w6m9-3g8m-hgf4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 18

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect con…

CVSS 2.0LOW 3.6 Local No auth Interaction — EPSS 0.00506 Published 2013-06-18 Fixed

RHSA-2013:1014

Fixed in

Fixes 25 records

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…