Red Hat Security Advisory

RHSA-2014:1042

java-1.7.1-ibm security update

Released 2014-08-11 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0, java-1.7.1-ibm-demo-1:1.7.1.1.1-1jpp.1.el7_0, java-1.7.1-ibm-devel-1:1.7.1.1.1-1jpp.1.el7_0 +3
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0, java-1.7.1-ibm-demo-1:1.7.1.1.1-1jpp.1.el7_0, java-1.7.1-ibm-devel-1:1.7.1.1.1-1jpp.1.el7_0 +1
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0, java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0.ppc, java-1.7.1-ibm-demo-1:1.7.1.1.1-1jpp.1.el7_0 +6
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0, java-1.7.1-ibm-demo-1:1.7.1.1.1-1jpp.1.el7_0, java-1.7.1-ibm-devel-1:1.7.1.1.1-1jpp.1.el7_0 +3

Fixes 15 records

TI-2014-03452 CVE-2014-4227 · GHSA-57p5-38vj-v635

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05321 Published 2014-07-17 Fixed

TI-2014-03487 CVE-2014-4262 · GHSA-ffj9-frgf-p668

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote…

MEDIUM 49

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05577 Published 2014-07-17 Fixed

TI-2014-03444 CVE-2014-4219 · GHSA-2xqm-8vg5-2563

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers…

MEDIUM 49

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05577 Published 2014-07-17 Fixed

TI-2014-02465 CVE-2014-3086 · GHSA-69wm-fwm5-f2r8

Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real…

MEDIUM 41

Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain privileges by leveraging the ability to exe…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05053 Published 2014-08-12 Partial fix

TI-2014-03434 CVE-2014-4209 · GHSA-r9j2-2c3g-m8hv

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote…

LOW 35

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via vectors related to JMX.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03826 Published 2014-07-17 Fixed

TI-2014-02449 CVE-2014-3068 · GHSA-24mr-4mwr-24fg

IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1…

LOW 31

IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01153 Published 2014-12-02 Fixed CWE-255

TI-2014-03491 CVE-2014-4266 · GHSA-g7wm-p554-cmgm

Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Serviceability.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04056 Published 2014-07-17 Partial fix

TI-2014-03477 CVE-2014-4252 · GHSA-x8j3-h997-4f6g

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote…

LOW 30

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04086 Published 2014-07-17 Fixed

TI-2014-03490 CVE-2014-4265 · GHSA-5w9m-3gw9-3c5p

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers…

LOW 29

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03234 Published 2014-07-17 Fixed

TI-2014-03445 CVE-2014-4220 · GHSA-rgv6-rg5r-4v8m

Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4208.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03192 Published 2014-07-17 Fixed

TI-2014-03443 CVE-2014-4218 · GHSA-7qv6-5jq4-2xp7

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote…

LOW 29

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03826 Published 2014-07-17 Fixed

TI-2014-03446 CVE-2014-4221 · GHSA-9r43-hq7q-4qmr

Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03482 Published 2014-07-17 Fixed

TI-2014-03488 CVE-2014-4263 · GHSA-5p67-pmrc-9vx3

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit…

LOW 25

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.03501 Published 2014-07-17 Fixed

TI-2014-03469 CVE-2014-4244 · GHSA-wh23-xv82-6pg8

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit…

LOW 25

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and JRockit R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.03501 Published 2014-07-17 Fixed

TI-2014-03433 CVE-2014-4208 · GHSA-xc8x-qr4j-5rjx

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows…

LOW 19

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4220.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02875 Published 2014-07-17 Fixed