Red Hat Security Advisory

RHSA-2015:0264

Red Hat Satellite IBM Java Runtime security update

Released 2015-02-24 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Satellite 5.6 (RHEL v.5) java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el5, java-1.6.0-ibm-devel-1:1.6.0.16.3-1jpp.1.el5
Red Hat Satellite 5.6 (RHEL v.6) java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6, java-1.6.0-ibm-devel-1:1.6.0.16.3-1jpp.1.el6

Fixes 40 records

TI-2014-02890 CVE-2014-3566 · GHSA-r82h-wc4x-gcp9

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses…

MEDIUM 62

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a…

CVSS 3.1LOW 3.4 Network No auth User interaction EPSS 0.99999 Published 2014-10-15 Partial fix CWE-329

TI-2014-05443 CVE-2014-6593 · GHSA-fpfc-8gg5-hw57

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE…

MEDIUM 55

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related t…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.66374 Published 2015-01-21 Fixed

TI-2015-00372 CVE-2015-0408 · GHSA-p95j-84hm-vv9m

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06877 Published 2015-01-21 Fixed

TI-2014-07260 CVE-2014-8891 · GHSA-cgw9-qmr5-66r3

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology…

MEDIUM 53

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attacke…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07244 Published 2015-03-06 Fixed

TI-2014-03452 CVE-2014-4227 · GHSA-57p5-38vj-v635

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05321 Published 2014-07-17 Fixed

TI-2015-00359 CVE-2015-0395 · GHSA-7w4x-vjmm-65hg

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote…

MEDIUM 49

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05909 Published 2015-01-21 Fixed

TI-2014-03487 CVE-2014-4262 · GHSA-ffj9-frgf-p668

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote…

MEDIUM 49

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05577 Published 2014-07-17 Fixed

TI-2014-03444 CVE-2014-4219 · GHSA-2xqm-8vg5-2563

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers…

MEDIUM 49

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05577 Published 2014-07-17 Fixed

TI-2014-05382 CVE-2014-6532 · GHSA-9x5w-fgxg-c345

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CV…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04808 Published 2014-10-15 Fixed

TI-2014-05353 CVE-2014-6503 · GHSA-wqrv-8v5g-pgqj

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers…

MEDIUM 48

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04808 Published 2014-10-15 Fixed

TI-2014-07261 CVE-2014-8892 · GHSA-qjg4-m6c6-gq85

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology…

MEDIUM 41

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04453 Published 2015-03-06 Fixed

TI-2014-05343 CVE-2014-6493 · GHSA-x9c3-pfjg-6f43

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers…

MEDIUM 41

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.04884 Published 2014-10-15 Fixed

TI-2014-03510 CVE-2014-4288 · GHSA-jvx7-35cg-w97r

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers…

MEDIUM 41

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.04884 Published 2014-10-15 Fixed

TI-2014-02465 CVE-2014-3086 · GHSA-69wm-fwm5-f2r8

Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real…

MEDIUM 41

Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain privileges by leveraging the ability to exe…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05053 Published 2014-08-12 Partial fix

TI-2014-05342 CVE-2014-6492 · GHSA-7h35-9873-jvrx

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on…

MEDIUM 40

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.03886 Published 2014-10-15 Fixed

TI-2014-05356 CVE-2014-6506 · GHSA-4mgp-qq86-9gj5

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE…

LOW 36

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03317 Published 2014-10-15 Fixed

TI-2015-00376 CVE-2015-0412 · GHSA-5rmc-hxjg-x3qp

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers…

LOW 35

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01459 Published 2015-01-21 Fixed

TI-2014-03434 CVE-2014-4209 · GHSA-r9j2-2c3g-m8hv

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote…

LOW 35

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via vectors related to JMX.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03826 Published 2014-07-17 Fixed

TI-2015-00370 CVE-2015-0406 · GHSA-9vj8-hjc2-m5vp

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers…

LOW 33

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03899 Published 2015-01-21 Fixed

TI-2015-00374 CVE-2015-0410 · GHSA-52j6-f8wf-g688

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle…

LOW 31

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05032 Published 2015-01-21 Fixed

TI-2015-00367 CVE-2015-0403 · GHSA-gvqf-ccjr-pp89

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to…

LOW 31

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00437 Published 2015-01-21 Fixed

TI-2014-05308 CVE-2014-6458 · GHSA-vv95-2f9w-r389

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to…

LOW 31

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00417 Published 2014-10-15 Fixed

TI-2014-02449 CVE-2014-3068 · GHSA-24mr-4mwr-24fg

IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1…

LOW 31

IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01153 Published 2014-12-02 Fixed CWE-255

TI-2014-02447 CVE-2014-3065 · GHSA-7f48-7whf-6c52

Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2…

LOW 31

Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00559 Published 2014-12-02 Fixed CWE-94

TI-2015-00371 CVE-2015-0407 · GHSA-gr6w-54mw-4jfq

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote…

LOW 30

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04351 Published 2015-01-21 Fixed

TI-2014-05361 CVE-2014-6511 · GHSA-vv94-8r3c-gfw5

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote…

LOW 30

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04053 Published 2014-10-15 Partial fix

TI-2014-03477 CVE-2014-4252 · GHSA-x8j3-h997-4f6g

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote…

LOW 30

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04086 Published 2014-07-17 Fixed

TI-2014-05365 CVE-2014-6515 · GHSA-j2pm-q44p-cjf6

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers…

LOW 29

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03429 Published 2014-10-15 Fixed

TI-2014-03490 CVE-2014-4265 · GHSA-5w9m-3gw9-3c5p

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers…

LOW 29

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03234 Published 2014-07-17 Fixed

TI-2014-03443 CVE-2014-4218 · GHSA-7qv6-5jq4-2xp7

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote…

LOW 29

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03826 Published 2014-07-17 Fixed

TI-2014-05381 CVE-2014-6531 · GHSA-795p-mp4f-mp92

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE…

LOW 26

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03041 Published 2014-10-15 Fixed

TI-2014-05362 CVE-2014-6512 · GHSA-hrpq-wp36-q3q3

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE…

LOW 26

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03041 Published 2014-10-15 Fixed

TI-2014-05307 CVE-2014-6457 · GHSA-5m53-6w9m-xpwf

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE…

LOW 25

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSS…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.03517 Published 2014-10-15 Fixed

TI-2014-03488 CVE-2014-4263 · GHSA-5p67-pmrc-9vx3

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit…

LOW 25

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.03501 Published 2014-07-17 Fixed

TI-2014-03469 CVE-2014-4244 · GHSA-wh23-xv82-6pg8

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit…

LOW 25

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and JRockit R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.03501 Published 2014-07-17 Fixed

TI-2014-05441 CVE-2014-6591 · GHSA-7hw8-8c2x-83rg

Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72…

LOW 20

Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-20…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.0405 Published 2015-01-21 Partial fix

TI-2014-05437 CVE-2014-6587 · GHSA-6v6g-fc35-c9jw

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to…

LOW 20

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 4.3 Local Low privileges Interaction — EPSS 0.00405 Published 2015-01-21 Fixed

TI-2014-05435 CVE-2014-6585 · GHSA-mr97-jqw9-fp77

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote…

LOW 20

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.04297 Published 2015-01-21 Partial fix

TI-2014-05408 CVE-2014-6558 · GHSA-x23w-8crm-5546

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE…

LOW 19

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03137 Published 2014-10-15 Fixed

TI-2014-05352 CVE-2014-6502 · GHSA-ghvq-8j98-8h72

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE…

LOW 19

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03089 Published 2014-10-15 Fixed