CVE-2014-4265 - Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect in

CVE-2014-4265

Summary

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.

References

Vulnerable Configurations

cpe:2.3:a:oracle:jdk:1.8.0:update5:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update5:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update60:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update60:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update75:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update75:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update75:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update75:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update5:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update5:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update60:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update60:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 13-05-2022 - 14:57)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:P/A:N

redhat via4

advisories

bugzilla

id	1119913
title	CVE-2014-4265 Oracle JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.81-1jpp.1.el5_10
oval oval:com.redhat.rhsa:tst:20140908001
comment java-1.6.0-sun is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414002

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.81-1jpp.1.el5_10
oval oval:com.redhat.rhsa:tst:20140908003
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414004

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.81-1jpp.1.el5_10
oval oval:com.redhat.rhsa:tst:20140908005
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414006

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.81-1jpp.1.el5_10
oval oval:com.redhat.rhsa:tst:20140908007
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414008

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.81-1jpp.1.el5_10
oval oval:com.redhat.rhsa:tst:20140908009
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414010

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.81-1jpp.1.el5_10
oval oval:com.redhat.rhsa:tst:20140908011
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414012

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.81-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140908014
comment java-1.6.0-sun is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414015

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.81-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140908016
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414017

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.81-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140908018
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414019

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.81-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140908020
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414021

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.81-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140908022
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414023

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.81-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140908024
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414025

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.81-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20140908027
comment java-1.6.0-sun is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414015

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.81-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20140908028
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414017

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.81-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20140908029
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414019

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.81-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20140908030
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414021

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.81-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20140908031
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414023

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.81-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20140908032
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414025

rhsa

id	RHSA-2014:0908
released	2014-07-21
severity	Important
title	RHSA-2014:0908: java-1.6.0-sun security update (Important)

rhsa
id RHSA-2014:0902
rhsa
id RHSA-2015:0264

rpms

java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5
java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7
java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10
java-1.7.0-oracle-devel-1:1.7.0.65-1jpp.1.el6_5
java-1.7.0-oracle-devel-1:1.7.0.65-1jpp.1.el7
java-1.7.0-oracle-devel-1:1.7.0.65-1jpp.2.el5_10
java-1.7.0-oracle-javafx-1:1.7.0.65-1jpp.1.el6_5
java-1.7.0-oracle-javafx-1:1.7.0.65-1jpp.1.el7
java-1.7.0-oracle-javafx-1:1.7.0.65-1jpp.2.el5_10
java-1.7.0-oracle-jdbc-1:1.7.0.65-1jpp.1.el6_5
java-1.7.0-oracle-jdbc-1:1.7.0.65-1jpp.1.el7
java-1.7.0-oracle-jdbc-1:1.7.0.65-1jpp.2.el5_10
java-1.7.0-oracle-plugin-1:1.7.0.65-1jpp.1.el6_5
java-1.7.0-oracle-plugin-1:1.7.0.65-1jpp.1.el7
java-1.7.0-oracle-plugin-1:1.7.0.65-1jpp.2.el5_10
java-1.7.0-oracle-src-1:1.7.0.65-1jpp.1.el6_5
java-1.7.0-oracle-src-1:1.7.0.65-1jpp.1.el7
java-1.7.0-oracle-src-1:1.7.0.65-1jpp.2.el5_10
java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10
java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5
java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7
java-1.6.0-sun-demo-1:1.6.0.81-1jpp.1.el5_10
java-1.6.0-sun-demo-1:1.6.0.81-1jpp.1.el6_5
java-1.6.0-sun-demo-1:1.6.0.81-1jpp.1.el7
java-1.6.0-sun-devel-1:1.6.0.81-1jpp.1.el5_10
java-1.6.0-sun-devel-1:1.6.0.81-1jpp.1.el6_5
java-1.6.0-sun-devel-1:1.6.0.81-1jpp.1.el7
java-1.6.0-sun-jdbc-1:1.6.0.81-1jpp.1.el5_10
java-1.6.0-sun-jdbc-1:1.6.0.81-1jpp.1.el6_5
java-1.6.0-sun-jdbc-1:1.6.0.81-1jpp.1.el7
java-1.6.0-sun-plugin-1:1.6.0.81-1jpp.1.el5_10
java-1.6.0-sun-plugin-1:1.6.0.81-1jpp.1.el6_5
java-1.6.0-sun-plugin-1:1.6.0.81-1jpp.1.el7
java-1.6.0-sun-src-1:1.6.0.81-1jpp.1.el5_10
java-1.6.0-sun-src-1:1.6.0.81-1jpp.1.el6_5
java-1.6.0-sun-src-1:1.6.0.81-1jpp.1.el7
java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el5_10
java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5
java-1.6.0-ibm-accessibility-1:1.6.0.16.1-1jpp.1.el5_10
java-1.6.0-ibm-demo-1:1.6.0.16.1-1jpp.1.el5_10
java-1.6.0-ibm-demo-1:1.6.0.16.1-1jpp.1.el6_5
java-1.6.0-ibm-devel-1:1.6.0.16.1-1jpp.1.el5_10
java-1.6.0-ibm-devel-1:1.6.0.16.1-1jpp.1.el6_5
java-1.6.0-ibm-javacomm-1:1.6.0.16.1-1jpp.1.el5_10
java-1.6.0-ibm-javacomm-1:1.6.0.16.1-1jpp.1.el6_5
java-1.6.0-ibm-jdbc-1:1.6.0.16.1-1jpp.1.el5_10
java-1.6.0-ibm-jdbc-1:1.6.0.16.1-1jpp.1.el6_5
java-1.6.0-ibm-plugin-1:1.6.0.16.1-1jpp.1.el5_10
java-1.6.0-ibm-plugin-1:1.6.0.16.1-1jpp.1.el6_5
java-1.6.0-ibm-src-1:1.6.0.16.1-1jpp.1.el5_10
java-1.6.0-ibm-src-1:1.6.0.16.1-1jpp.1.el6_5
java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el5_10
java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5
java-1.7.0-ibm-demo-1:1.7.0.7.1-1jpp.1.el5_10
java-1.7.0-ibm-demo-1:1.7.0.7.1-1jpp.1.el6_5
java-1.7.0-ibm-devel-1:1.7.0.7.1-1jpp.1.el5_10
java-1.7.0-ibm-devel-1:1.7.0.7.1-1jpp.1.el6_5
java-1.7.0-ibm-jdbc-1:1.7.0.7.1-1jpp.1.el5_10
java-1.7.0-ibm-jdbc-1:1.7.0.7.1-1jpp.1.el6_5
java-1.7.0-ibm-plugin-1:1.7.0.7.1-1jpp.1.el5_10
java-1.7.0-ibm-plugin-1:1.7.0.7.1-1jpp.1.el6_5
java-1.7.0-ibm-src-1:1.7.0.7.1-1jpp.1.el5_10
java-1.7.0-ibm-src-1:1.7.0.7.1-1jpp.1.el6_5
java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0
java-1.7.1-ibm-demo-1:1.7.1.1.1-1jpp.1.el7_0
java-1.7.1-ibm-devel-1:1.7.1.1.1-1jpp.1.el7_0
java-1.7.1-ibm-jdbc-1:1.7.1.1.1-1jpp.1.el7_0
java-1.7.1-ibm-plugin-1:1.7.1.1.1-1jpp.1.el7_0
java-1.7.1-ibm-src-1:1.7.1.1.1-1jpp.1.el7_0
java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el5
java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6
java-1.6.0-ibm-devel-1:1.6.0.16.3-1jpp.1.el5
java-1.6.0-ibm-devel-1:1.6.0.16.3-1jpp.1.el6

refmap via4

bid	68632
bugtraq	20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities
confirm	http://www-01.ibm.com/support/docview.wss?uid=swg21680334 http://www-01.ibm.com/support/docview.wss?uid=swg21686383 http://www-01.ibm.com/support/docview.wss?uid=swg21686824 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://www.vmware.com/security/advisories/VMSA-2014-0012.html
fulldisc	20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities
gentoo	GLSA-201502-12
hp	HPSBUX03091 HPSBUX03092 SSRT101667 SSRT101668
sectrack	1030577
secunia	59404 59680 59924 59986 59987 60081 60245 60317 60622 60817 61577 61640
suse	SUSE-SU-2015:0344 SUSE-SU-2015:0392
xf	oracle-cpujul2014-cve20144265(94597)

Last major update

13-05-2022 - 14:57

Published

17-07-2014 - 11:17

Last modified

13-05-2022 - 14:57