csaf_redhat - rhsa-2014

rhsa-2014_0026

Vulnerability from csaf_redhat

Published

2014-01-15 00:59

Modified

2024-09-13 08:51

Summary

Red Hat Security Advisory: java-1.7.0-openjdk security update

Notes

Topic

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

These packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Software Development Kit. An input validation flaw was discovered in the font layout engine in the 2D component. A specially crafted font file could trigger Java Virtual Machine memory corruption when processed. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions. (CVE-2013-5907) Multiple improper permission check issues were discovered in the CORBA, JNDI, and Libraries components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. (CVE-2014-0428, CVE-2014-0422, CVE-2013-5893) Multiple improper permission check issues were discovered in the Serviceability, Security, CORBA, JAAS, JAXP, and Networking components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2014-0373, CVE-2013-5878, CVE-2013-5910, CVE-2013-5896, CVE-2013-5884, CVE-2014-0416, CVE-2014-0376, CVE-2014-0368) It was discovered that the Beans component did not restrict processing of XML external entities. This flaw could cause a Java application using Beans to leak sensitive information, or affect application availability. (CVE-2014-0423) It was discovered that the JSSE component could leak timing information during the TLS/SSL handshake. This could possibly lead to disclosure of information about the used encryption keys. (CVE-2014-0411) Note: The java-1.7.0-openjdk package shipped with Red Hat Enterprise Linux 6.5 via RHBA-2013:1611 replaced "java7" with "java" in the provides list. This update re-adds "java7" to the provides list to maintain backwards compatibility with releases prior to Red Hat Enterprise Linux 6.5. Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website. All users of java-1.7.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated java-1.7.0-openjdk packages that fix various security issues are\nnow available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "These packages provide the OpenJDK 7 Java Runtime Environment and the\nOpenJDK 7 Software Development Kit.\n\nAn input validation flaw was discovered in the font layout engine in the 2D\ncomponent. A specially crafted font file could trigger Java Virtual Machine\nmemory corruption when processed. An untrusted Java application or applet\ncould possibly use this flaw to bypass Java sandbox restrictions.\n(CVE-2013-5907)\n\nMultiple improper permission check issues were discovered in the CORBA,\nJNDI, and Libraries components in OpenJDK. An untrusted Java application or\napplet could use these flaws to bypass Java sandbox restrictions.\n(CVE-2014-0428, CVE-2014-0422, CVE-2013-5893)\n\nMultiple improper permission check issues were discovered in the\nServiceability, Security, CORBA, JAAS, JAXP, and Networking components in\nOpenJDK. An untrusted Java application or applet could use these flaws to\nbypass certain Java sandbox restrictions. (CVE-2014-0373, CVE-2013-5878,\nCVE-2013-5910, CVE-2013-5896, CVE-2013-5884, CVE-2014-0416, CVE-2014-0376,\nCVE-2014-0368)\n\nIt was discovered that the Beans component did not restrict processing of\nXML external entities. This flaw could cause a Java application using Beans\nto leak sensitive information, or affect application availability.\n(CVE-2014-0423)\n\nIt was discovered that the JSSE component could leak timing information\nduring the TLS/SSL handshake. This could possibly lead to disclosure of\ninformation about the used encryption keys. (CVE-2014-0411)\n\nNote: The java-1.7.0-openjdk package shipped with Red Hat Enterprise Linux\n6.5 via RHBA-2013:1611 replaced \"java7\" with \"java\" in the provides list.\nThis update re-adds \"java7\" to the provides list to maintain backwards\ncompatibility with releases prior to Red Hat Enterprise Linux 6.5.\n\nNote: If the web browser plug-in provided by the icedtea-web package was\ninstalled, the issues exposed via Java applets could have been exploited\nwithout user interaction if a user visited a malicious website.\n\nAll users of java-1.7.0-openjdk are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK Java\nmust be restarted for the update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:0026",
        "url": "https://access.redhat.com/errata/RHSA-2014:0026"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
        "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
      },
      {
        "category": "external",
        "summary": "1051519",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051519"
      },
      {
        "category": "external",
        "summary": "1051528",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051528"
      },
      {
        "category": "external",
        "summary": "1051549",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051549"
      },
      {
        "category": "external",
        "summary": "1051699",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051699"
      },
      {
        "category": "external",
        "summary": "1051823",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051823"
      },
      {
        "category": "external",
        "summary": "1051911",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051911"
      },
      {
        "category": "external",
        "summary": "1051912",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051912"
      },
      {
        "category": "external",
        "summary": "1051923",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051923"
      },
      {
        "category": "external",
        "summary": "1052915",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052915"
      },
      {
        "category": "external",
        "summary": "1052919",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052919"
      },
      {
        "category": "external",
        "summary": "1052942",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052942"
      },
      {
        "category": "external",
        "summary": "1053010",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053010"
      },
      {
        "category": "external",
        "summary": "1053066",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053066"
      },
      {
        "category": "external",
        "summary": "1053266",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053266"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://access.redhat.com/security/data/csaf/v2/advisories/2014/rhsa-2014_0026.json"
      }
    ],
    "title": "Red Hat Security Advisory: java-1.7.0-openjdk security update",
    "tracking": {
      "current_release_date": "2024-09-13T08:51:40+00:00",
      "generator": {
        "date": "2024-09-13T08:51:40+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "3.33.3"
        }
      },
      "id": "RHSA-2014:0026",
      "initial_release_date": "2014-01-15T00:59:20+00:00",
      "revision_history": [
        {
          "date": "2014-01-15T00:59:20+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-01-15T00:59:20+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-09-13T08:51:40+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                  "product_id": "6Client-optional-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                  "product_id": "6ComputeNode-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                  "product_id": "6Workstation-optional-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
                "product": {
                  "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
                  "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.51-2.4.4.1.el6_5?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
                "product": {
                  "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
                  "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.51-2.4.4.1.el6_5?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
                "product": {
                  "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
                  "product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.51-2.4.4.1.el6_5?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
                "product": {
                  "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
                  "product_id": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.51-2.4.4.1.el6_5?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
                "product": {
                  "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
                  "product_id": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.51-2.4.4.1.el6_5?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                  "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.51-2.4.4.1.el6_5?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                  "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.51-2.4.4.1.el6_5?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                  "product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.51-2.4.4.1.el6_5?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                  "product_id": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.51-2.4.4.1.el6_5?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                  "product_id": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.51-2.4.4.1.el6_5?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
                "product": {
                  "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
                  "product_id": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-javadoc@1.7.0.51-2.4.4.1.el6_5?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
                "product": {
                  "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
                  "product_id": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.51-2.4.4.1.el6_5?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.5.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Arun Babu Neelicattu"
          ],
          "organization": "Red Hat Security Response Team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-4578",
      "discovery_date": "2013-11-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1031471"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-4578"
        },
        {
          "category": "external",
          "summary": "RHBZ#1031471",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1031471"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4578",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-4578"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4578",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4578"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars"
    },
    {
      "cve": "CVE-2013-5878",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1051823"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.  NOTE: the previous information is from the January 2014 CPU.  Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: null xmlns handling issue (Security, 8025026)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-5878"
        },
        {
          "category": "external",
          "summary": "RHBZ#1051823",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051823"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-5878",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-5878"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5878",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5878"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenJDK: null xmlns handling issue (Security, 8025026)"
    },
    {
      "cve": "CVE-2013-5884",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1051911"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: insufficient security checks in CORBA stub factories (CORBA, 8026193)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-5884"
        },
        {
          "category": "external",
          "summary": "RHBZ#1051911",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051911"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-5884",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-5884"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5884",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5884"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: insufficient security checks in CORBA stub factories (CORBA, 8026193)"
    },
    {
      "cve": "CVE-2013-5893",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1051549"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to improper handling of methods in MethodHandles in HotSpot JVM, which allows attackers to escape the sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: JVM method processing issues (Libraries, 8029507)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-5893"
        },
        {
          "category": "external",
          "summary": "RHBZ#1051549",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051549"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-5893",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-5893"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5893",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5893"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: JVM method processing issues (Libraries, 8029507)"
    },
    {
      "cve": "CVE-2013-5896",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1053266"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-5896"
        },
        {
          "category": "external",
          "summary": "RHBZ#1053266",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053266"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-5896",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-5896"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5896",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5896"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        },
        {
          "category": "workaround",
          "details": "Applications running with a security manager that make direct use of classes\nin these JDK internal packages, need to adjust their security policy to\ngrant access. See Java Security Policy Files documentation.",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)"
    },
    {
      "cve": "CVE-2013-5907",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1052915"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-5907"
        },
        {
          "category": "external",
          "summary": "RHBZ#1052915",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052915"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-5907",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-5907"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5907",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5907"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)"
    },
    {
      "cve": "CVE-2013-5910",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1052942"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-5910"
        },
        {
          "category": "external",
          "summary": "RHBZ#1052942",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052942"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-5910",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-5910"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5910",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5910"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)"
    },
    {
      "cve": "CVE-2014-0368",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1052919"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: insufficient Socket checkListen checks (Networking, 8011786)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-0368"
        },
        {
          "category": "external",
          "summary": "RHBZ#1052919",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052919"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0368",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-0368"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0368",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0368"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: insufficient Socket checkListen checks (Networking, 8011786)"
    },
    {
      "cve": "CVE-2014-0373",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1051699"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-0373"
        },
        {
          "category": "external",
          "summary": "RHBZ#1051699",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051699"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0373",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-0373"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0373",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0373"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126)"
    },
    {
      "cve": "CVE-2014-0376",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1051923"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for \"code permissions when creating document builder factories.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: document builder missing security checks (JAXP, 8027201, 8025018)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-0376"
        },
        {
          "category": "external",
          "summary": "RHBZ#1051923",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051923"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0376",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-0376"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0376",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0376"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: document builder missing security checks (JAXP, 8027201, 8025018)"
    },
    {
      "cve": "CVE-2014-0411",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1053010"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: TLS/SSL handshake timing issues (JSSE, 8023069)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-0411"
        },
        {
          "category": "external",
          "summary": "RHBZ#1053010",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053010"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0411",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-0411"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0411",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0411"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: TLS/SSL handshake timing issues (JSSE, 8023069)"
    },
    {
      "cve": "CVE-2014-0416",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1051912"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: insecure subject principals set handling (JAAS, 8024306)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-0416"
        },
        {
          "category": "external",
          "summary": "RHBZ#1051912",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051912"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0416",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-0416"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0416",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0416"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: insecure subject principals set handling (JAAS, 8024306)"
    },
    {
      "cve": "CVE-2014-0422",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1051528"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: insufficient package access checks in the Naming component (JNDI, 8025758)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-0422"
        },
        {
          "category": "external",
          "summary": "RHBZ#1051528",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051528"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0422",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-0422"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0422",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0422"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: insufficient package access checks in the Naming component (JNDI, 8025758)"
    },
    {
      "cve": "CVE-2014-0423",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1053066"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: XXE issue in decoder (Beans, 8023245)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-0423"
        },
        {
          "category": "external",
          "summary": "RHBZ#1053066",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053066"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0423",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-0423"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0423",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0423"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK: XXE issue in decoder (Beans, 8023245)"
    },
    {
      "cve": "CVE-2014-0428",
      "discovery_date": "2014-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1051519"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to \"insufficient security checks in IIOP streams,\" which allows attackers to escape the sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
          "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-0428"
        },
        {
          "category": "external",
          "summary": "RHBZ#1051519",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051519"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0428",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-0428"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0428",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0428"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        }
      ],
      "release_date": "2014-01-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0026"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Client-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Server-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.src",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5.x86_64",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5.noarch",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.i686",
            "6Workstation-optional-6.5.z:java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)"
    }
  ]
}

cve-2014-0411

Vulnerability from cvelistv5

Published

2014-01-15 02:50

Modified

2024-08-06 09:13

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.

References

URL	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg21676373	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21669519	x_refsource_CONFIRM
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/59705	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/59324	third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-0136.html	vendor-advisory, x_refsource_REDHAT
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilities/90357	vdb-entry, x_refsource_XF
http://www-01.ibm.com/support/docview.wss?uid=swg21682904	x_refsource_CONFIRM
http://secunia.com/advisories/59251	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/59194	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/60498	third-party-advisory, x_refsource_SECUNIA
https://www.ibm.com/support/docview.wss?uid=swg21677913	x_refsource_CONFIRM
http://secunia.com/advisories/60833	third-party-advisory, x_refsource_SECUNIA
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004656	x_refsource_CONFIRM
http://secunia.com/advisories/60005	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/60835	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/57809	third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/64918	vdb-entry, x_refsource_BID
http://secunia.com/advisories/59071	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21675938	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21680387	x_refsource_CONFIRM
https://www.ibm.com/support/docview.wss?uid=swg21675223	x_refsource_CONFIRM
http://secunia.com/advisories/59339	third-party-advisory, x_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg21682671	x_refsource_CONFIRM
http://secunia.com/advisories/59872	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/59283	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://www-01.ibm.com/support/docview.wss?uid=swg21682669	x_refsource_CONFIRM
http://www.ibm.com/support/docview.wss?uid=swg21672078	x_refsource_CONFIRM
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/59254	third-party-advisory, x_refsource_SECUNIA
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.ibm.com/support/docview.wss?uid=ssg1S1004745	x_refsource_CONFIRM
http://secunia.com/advisories/59665	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/56487	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://www-01.ibm.com/support/docview.wss?uid=swg21677388	x_refsource_CONFIRM
http://secunia.com/advisories/59037	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/59082	third-party-advisory, x_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg21680234	x_refsource_CONFIRM
http://osvdb.org/102028	vdb-entry, x_refsource_OSVDB
http://www-01.ibm.com/support/docview.wss?uid=swg21676978	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1053010	x_refsource_CONFIRM
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://secunia.com/advisories/59704	third-party-advisory, x_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg21682668	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://secunia.com/advisories/60836	third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://www-01.ibm.com/support/docview.wss?uid=swg21676190	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21682670	x_refsource_CONFIRM
http://secunia.com/advisories/59235	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:13:10.517Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676373"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21669519"
          },
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "59705",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59705"
          },
          {
            "name": "59324",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59324"
          },
          {
            "name": "RHSA-2014:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "oracle-cpujan2014-cve20140411(90357)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90357"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682904"
          },
          {
            "name": "59251",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59251"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "59194",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59194"
          },
          {
            "name": "60498",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60498"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.ibm.com/support/docview.wss?uid=swg21677913"
          },
          {
            "name": "60833",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60833"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004656"
          },
          {
            "name": "60005",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60005"
          },
          {
            "name": "60835",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60835"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "57809",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57809"
          },
          {
            "name": "64918",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64918"
          },
          {
            "name": "59071",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59071"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675938"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680387"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.ibm.com/support/docview.wss?uid=swg21675223"
          },
          {
            "name": "59339",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59339"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682671"
          },
          {
            "name": "59872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59872"
          },
          {
            "name": "59283",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59283"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682669"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ibm.com/support/docview.wss?uid=swg21672078"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "59254",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59254"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1004745"
          },
          {
            "name": "59665",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59665"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "56487",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56487"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388"
          },
          {
            "name": "59037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59037"
          },
          {
            "name": "59082",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59082"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680234"
          },
          {
            "name": "102028",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/102028"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053010"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "59704",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59704"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682668"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "60836",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60836"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676190"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682670"
          },
          {
            "name": "59235",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59235"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676373"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21669519"
        },
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "59705",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59705"
        },
        {
          "name": "59324",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59324"
        },
        {
          "name": "RHSA-2014:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "oracle-cpujan2014-cve20140411(90357)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90357"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682904"
        },
        {
          "name": "59251",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59251"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "59194",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59194"
        },
        {
          "name": "60498",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60498"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.ibm.com/support/docview.wss?uid=swg21677913"
        },
        {
          "name": "60833",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60833"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004656"
        },
        {
          "name": "60005",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60005"
        },
        {
          "name": "60835",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60835"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "57809",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57809"
        },
        {
          "name": "64918",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64918"
        },
        {
          "name": "59071",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59071"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675938"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680387"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.ibm.com/support/docview.wss?uid=swg21675223"
        },
        {
          "name": "59339",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59339"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682671"
        },
        {
          "name": "59872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59872"
        },
        {
          "name": "59283",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59283"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682669"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ibm.com/support/docview.wss?uid=swg21672078"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "59254",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59254"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1004745"
        },
        {
          "name": "59665",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59665"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "56487",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56487"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388"
        },
        {
          "name": "59037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59037"
        },
        {
          "name": "59082",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59082"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680234"
        },
        {
          "name": "102028",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/102028"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053010"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "59704",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59704"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682668"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "60836",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60836"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676190"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682670"
        },
        {
          "name": "59235",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59235"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-0411",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21676373",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676373"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21669519",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21669519"
            },
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "59705",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59705"
            },
            {
              "name": "59324",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59324"
            },
            {
              "name": "RHSA-2014:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc",
              "refsource": "CONFIRM",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "oracle-cpujan2014-cve20140411(90357)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90357"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21682904",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682904"
            },
            {
              "name": "59251",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59251"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "59194",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59194"
            },
            {
              "name": "60498",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60498"
            },
            {
              "name": "https://www.ibm.com/support/docview.wss?uid=swg21677913",
              "refsource": "CONFIRM",
              "url": "https://www.ibm.com/support/docview.wss?uid=swg21677913"
            },
            {
              "name": "60833",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60833"
            },
            {
              "name": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132",
              "refsource": "CONFIRM",
              "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004656",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004656"
            },
            {
              "name": "60005",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60005"
            },
            {
              "name": "60835",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60835"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "57809",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57809"
            },
            {
              "name": "64918",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64918"
            },
            {
              "name": "59071",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59071"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21675938",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675938"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21680387",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680387"
            },
            {
              "name": "https://www.ibm.com/support/docview.wss?uid=swg21675223",
              "refsource": "CONFIRM",
              "url": "https://www.ibm.com/support/docview.wss?uid=swg21675223"
            },
            {
              "name": "59339",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59339"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21682671",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682671"
            },
            {
              "name": "59872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59872"
            },
            {
              "name": "59283",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59283"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21682669",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682669"
            },
            {
              "name": "http://www.ibm.com/support/docview.wss?uid=swg21672078",
              "refsource": "CONFIRM",
              "url": "http://www.ibm.com/support/docview.wss?uid=swg21672078"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "59254",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59254"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "http://www.ibm.com/support/docview.wss?uid=ssg1S1004745",
              "refsource": "CONFIRM",
              "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1004745"
            },
            {
              "name": "59665",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59665"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "56487",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56487"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388"
            },
            {
              "name": "59037",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59037"
            },
            {
              "name": "59082",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59082"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21680234",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680234"
            },
            {
              "name": "102028",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/102028"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1053010",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053010"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "59704",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59704"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21682668",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682668"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "60836",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60836"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21676190",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676190"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21682670",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682670"
            },
            {
              "name": "59235",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59235"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-0411",
    "datePublished": "2014-01-15T02:50:00",
    "dateReserved": "2013-12-12T00:00:00",
    "dateUpdated": "2024-08-06T09:13:10.517Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-5910

Vulnerability from cvelistv5

Published

2014-01-15 01:33

Modified

2024-08-06 17:29

Severity

Summary

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/07004bb53c3c	x_refsource_CONFIRM
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://www.securityfocus.com/bid/64933	vdb-entry, x_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1052942	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://osvdb.org/102021	vdb-entry, x_refsource_OSVDB
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilities/90352	vdb-entry, x_refsource_XF
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:29:42.288Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/07004bb53c3c"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "64933",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64933"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052942"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "102021",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/102021"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "oracle-cpujan2014-cve20135910(90352)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90352"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/07004bb53c3c"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "64933",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64933"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052942"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "102021",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/102021"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "oracle-cpujan2014-cve20135910(90352)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90352"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-5910",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/07004bb53c3c",
              "refsource": "CONFIRM",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/07004bb53c3c"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "64933",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64933"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1052942",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052942"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "102021",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/102021"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "oracle-cpujan2014-cve20135910(90352)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90352"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-5910",
    "datePublished": "2014-01-15T01:33:00",
    "dateReserved": "2013-09-18T00:00:00",
    "dateUpdated": "2024-08-06T17:29:42.288Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-0423

Vulnerability from cvelistv5

Published

2014-01-15 02:50

Modified

2024-08-06 09:13

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/90340	vdb-entry, x_refsource_XF
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0136.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64914	vdb-entry, x_refsource_BID
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1053066	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://secunia.com/advisories/59283	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/56487	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://www-01.ibm.com/support/docview.wss?uid=swg21677388	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www-01.ibm.com/support/docview.wss?uid=swg21679287	x_refsource_CONFIRM
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/60568	third-party-advisory, x_refsource_SECUNIA
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/995b32f013f5	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:13:10.491Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "oracle-cpujan2014-cve20140423(90340)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90340"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "RHSA-2014:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "64914",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64914"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053066"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "name": "59283",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59283"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "56487",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56487"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679287"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "name": "60568",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60568"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/995b32f013f5"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "oracle-cpujan2014-cve20140423(90340)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90340"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "RHSA-2014:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "64914",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64914"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053066"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "name": "59283",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59283"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "56487",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56487"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679287"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "name": "60568",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60568"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/995b32f013f5"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-0423",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "oracle-cpujan2014-cve20140423(90340)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90340"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "RHSA-2014:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "64914",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64914"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1053066",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053066"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "59283",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59283"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "56487",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56487"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21679287",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679287"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "60568",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60568"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/995b32f013f5",
              "refsource": "CONFIRM",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/995b32f013f5"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-0423",
    "datePublished": "2014-01-15T02:50:00",
    "dateReserved": "2013-12-12T00:00:00",
    "dateUpdated": "2024-08-06T09:13:10.491Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-0416

Vulnerability from cvelistv5

Published

2014-01-15 02:50

Modified

2024-08-06 09:13

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0136.html	vendor-advisory, x_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilities/90349	vdb-entry, x_refsource_XF
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://www-01.ibm.com/support/docview.wss?uid=swg21677294	x_refsource_CONFIRM
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://osvdb.org/102017	vdb-entry, x_refsource_OSVDB
http://secunia.com/advisories/59339	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/59283	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/abe1cb2d27cb	x_refsource_MISC
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.securityfocus.com/bid/64937	vdb-entry, x_refsource_BID
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/59307	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://www-01.ibm.com/support/docview.wss?uid=swg21677388	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21676978	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www-01.ibm.com/support/docview.wss?uid=swg21679287	x_refsource_CONFIRM
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1051912	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/60568	third-party-advisory, x_refsource_SECUNIA
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/59235	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:13:10.521Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "RHSA-2014:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
          },
          {
            "name": "oracle-cpujan2014-cve20140416(90349)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90349"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677294"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "name": "102017",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/102017"
          },
          {
            "name": "59339",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59339"
          },
          {
            "name": "59283",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59283"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/abe1cb2d27cb"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "64937",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64937"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "59307",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59307"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679287"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051912"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "name": "60568",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60568"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "59235",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59235"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "RHSA-2014:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
        },
        {
          "name": "oracle-cpujan2014-cve20140416(90349)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90349"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677294"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "name": "102017",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/102017"
        },
        {
          "name": "59339",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59339"
        },
        {
          "name": "59283",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59283"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/abe1cb2d27cb"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "64937",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64937"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "59307",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59307"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679287"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051912"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "name": "60568",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60568"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "59235",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59235"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-0416",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "RHSA-2014:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
            },
            {
              "name": "oracle-cpujan2014-cve20140416(90349)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90349"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21677294",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677294"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "102017",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/102017"
            },
            {
              "name": "59339",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59339"
            },
            {
              "name": "59283",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59283"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/abe1cb2d27cb",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/abe1cb2d27cb"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "64937",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64937"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "59307",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59307"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677388"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21679287",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679287"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1051912",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051912"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "60568",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60568"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "59235",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59235"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-0416",
    "datePublished": "2014-01-15T02:50:00",
    "dateReserved": "2013-12-12T00:00:00",
    "dateUpdated": "2024-08-06T09:13:10.521Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-5884

Vulnerability from cvelistv5

Published

2014-01-15 00:30

Modified

2024-08-06 17:22

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilities/90348	vdb-entry, x_refsource_XF
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1051911	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/b1548473f261	x_refsource_MISC
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://osvdb.org/102016	vdb-entry, x_refsource_OSVDB
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64924	vdb-entry, x_refsource_BID
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:22:31.594Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "oracle-cpujan2014-cve20135884(90348)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90348"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051911"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/b1548473f261"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "name": "102016",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/102016"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "name": "64924",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64924"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "oracle-cpujan2014-cve20135884(90348)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90348"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051911"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/b1548473f261"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "name": "102016",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/102016"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "name": "64924",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64924"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-5884",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "oracle-cpujan2014-cve20135884(90348)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90348"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1051911",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051911"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/b1548473f261",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/b1548473f261"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "102016",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/102016"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "64924",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64924"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-5884",
    "datePublished": "2014-01-15T00:30:00",
    "dateReserved": "2013-09-18T00:00:00",
    "dateUpdated": "2024-08-06T17:22:31.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-5893

Vulnerability from cvelistv5

Published

2014-01-15 01:33

Modified

2024-08-06 17:22

Severity

Summary

Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to improper handling of methods in MethodHandles in HotSpot JVM, which allows attackers to escape the sandbox.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/839100e42498	x_refsource_MISC
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://osvdb.org/102000	vdb-entry, x_refsource_OSVDB
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
https://bugzilla.redhat.com/show_bug.cgi?id=1051549	x_refsource_CONFIRM
http://www.securityfocus.com/bid/64863	vdb-entry, x_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:22:31.300Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/839100e42498"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "102000",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/102000"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051549"
          },
          {
            "name": "64863",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64863"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to improper handling of methods in MethodHandles in HotSpot JVM, which allows attackers to escape the sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-09-26T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/839100e42498"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "102000",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/102000"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051549"
        },
        {
          "name": "64863",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64863"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-5893",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to improper handling of methods in MethodHandles in HotSpot JVM, which allows attackers to escape the sandbox."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/839100e42498",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/839100e42498"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "102000",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/102000"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1051549",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051549"
            },
            {
              "name": "64863",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64863"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-5893",
    "datePublished": "2014-01-15T01:33:00",
    "dateReserved": "2013-09-18T00:00:00",
    "dateUpdated": "2024-08-06T17:22:31.300Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-5907

Vulnerability from cvelistv5

Published

2014-01-15 01:33

Modified

2024-08-06 17:29

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0136.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
https://bugzilla.redhat.com/show_bug.cgi?id=1052915	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://osvdb.org/101995	vdb-entry, x_refsource_OSVDB
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64894	vdb-entry, x_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9d29c19f1de1	x_refsource_MISC
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/56487	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:29:42.685Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "RHSA-2014:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052915"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "101995",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/101995"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "64894",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64894"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9d29c19f1de1"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "56487",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56487"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "RHSA-2014:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052915"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "101995",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/101995"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "64894",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64894"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9d29c19f1de1"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "56487",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56487"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-5907",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "RHSA-2014:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1052915",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052915"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "101995",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/101995"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "64894",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64894"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9d29c19f1de1",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9d29c19f1de1"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "56487",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56487"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-5907",
    "datePublished": "2014-01-15T01:33:00",
    "dateReserved": "2013-09-18T00:00:00",
    "dateUpdated": "2024-08-06T17:29:42.685Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-0373

Vulnerability from cvelistv5

Published

2014-01-15 01:33

Modified

2024-08-06 09:13

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox.

References

URL	Tags
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/496c51673dec	x_refsource_MISC
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1051699	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0136.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64922	vdb-entry, x_refsource_BID
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:13:10.492Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/496c51673dec"
          },
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051699"
          },
          {
            "name": "RHSA-2014:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "64922",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64922"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/496c51673dec"
        },
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051699"
        },
        {
          "name": "RHSA-2014:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "64922",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64922"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-0373",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/496c51673dec",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/496c51673dec"
            },
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1051699",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051699"
            },
            {
              "name": "RHSA-2014:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "64922",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64922"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-0373",
    "datePublished": "2014-01-15T01:33:00",
    "dateReserved": "2013-12-12T00:00:00",
    "dateUpdated": "2024-08-06T09:13:10.492Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-0376

Vulnerability from cvelistv5

Published

2014-01-15 01:33

Modified

2024-08-06 09:13

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for "code permissions when creating document builder factories."

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=1051923	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0136.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/42be8e6266ab	x_refsource_MISC
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://www.securityfocus.com/bid/64907	vdb-entry, x_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/783ceae9b736	x_refsource_MISC
http://osvdb.org/102018	vdb-entry, x_refsource_OSVDB
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
https://exchange.xforce.ibmcloud.com/vulnerabilities/90350	vdb-entry, x_refsource_XF
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:13:10.441Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051923"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "RHSA-2014:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/42be8e6266ab"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "64907",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64907"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/783ceae9b736"
          },
          {
            "name": "102018",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/102018"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "name": "oracle-cpujan2014-cve20140376(90350)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90350"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for \"code permissions when creating document builder factories.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051923"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "RHSA-2014:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/42be8e6266ab"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "64907",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64907"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/783ceae9b736"
        },
        {
          "name": "102018",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/102018"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "name": "oracle-cpujan2014-cve20140376(90350)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90350"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-0376",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for \"code permissions when creating document builder factories.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1051923",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051923"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "RHSA-2014:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/42be8e6266ab",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/42be8e6266ab"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "64907",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64907"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/783ceae9b736",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/783ceae9b736"
            },
            {
              "name": "102018",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/102018"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "oracle-cpujan2014-cve20140376(90350)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90350"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-0376",
    "datePublished": "2014-01-15T01:33:00",
    "dateReserved": "2013-12-12T00:00:00",
    "dateUpdated": "2024-08-06T09:13:10.441Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-0428

Vulnerability from cvelistv5

Published

2014-01-15 02:50

Modified

2024-08-06 09:13

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0136.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1051519	x_refsource_CONFIRM
http://www.securityfocus.com/bid/64935	vdb-entry, x_refsource_BID
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/0a879f00b698	x_refsource_MISC
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://osvdb.org/101996	vdb-entry, x_refsource_OSVDB
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:13:10.581Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "RHSA-2014:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051519"
          },
          {
            "name": "64935",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64935"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/0a879f00b698"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "101996",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/101996"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to \"insufficient security checks in IIOP streams,\" which allows attackers to escape the sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "RHSA-2014:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051519"
        },
        {
          "name": "64935",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64935"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/0a879f00b698"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "101996",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/101996"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-0428",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to \"insufficient security checks in IIOP streams,\" which allows attackers to escape the sandbox."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "RHSA-2014:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1051519",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051519"
            },
            {
              "name": "64935",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64935"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/0a879f00b698",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/0a879f00b698"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "101996",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/101996"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-0428",
    "datePublished": "2014-01-15T02:50:00",
    "dateReserved": "2013-12-12T00:00:00",
    "dateUpdated": "2024-08-06T09:13:10.581Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-0422

Vulnerability from cvelistv5

Published

2014-01-15 02:50

Modified

2024-08-06 09:13

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0136.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=1051528	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.securityfocus.com/bid/64921	vdb-entry, x_refsource_BID
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://osvdb.org/101997	vdb-entry, x_refsource_OSVDB
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:13:10.493Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "RHSA-2014:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051528"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "64921",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64921"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "101997",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/101997"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "RHSA-2014:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051528"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "64921",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64921"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "101997",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/101997"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-0422",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "RHSA-2014:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1051528",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051528"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "64921",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64921"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "101997",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/101997"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-0422",
    "datePublished": "2014-01-15T02:50:00",
    "dateReserved": "2013-12-12T00:00:00",
    "dateUpdated": "2024-08-06T09:13:10.493Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-0368

Vulnerability from cvelistv5

Published

2014-01-15 01:33

Modified

2024-08-06 09:13

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0136.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1052919	x_refsource_CONFIRM
http://www.securityfocus.com/bid/64930	vdb-entry, x_refsource_BID
http://secunia.com/advisories/59339	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://www-01.ibm.com/support/docview.wss?uid=swg21676978	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/e6160aedadd5	x_refsource_MISC
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/59235	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:13:10.449Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "RHSA-2014:0136",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052919"
          },
          {
            "name": "64930",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64930"
          },
          {
            "name": "59339",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59339"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/e6160aedadd5"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "59235",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59235"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "RHSA-2014:0136",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052919"
        },
        {
          "name": "64930",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64930"
        },
        {
          "name": "59339",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59339"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/e6160aedadd5"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "59235",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59235"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2014-0368",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "RHSA-2014:0136",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0136.html"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1052919",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052919"
            },
            {
              "name": "64930",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64930"
            },
            {
              "name": "59339",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59339"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676978"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/e6160aedadd5",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/e6160aedadd5"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "59235",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59235"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2014-0368",
    "datePublished": "2014-01-15T01:33:00",
    "dateReserved": "2013-12-12T00:00:00",
    "dateUpdated": "2024-08-06T09:13:10.449Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-5896

Vulnerability from cvelistv5

Published

2014-01-15 01:33

Modified

2024-08-06 17:22

Severity

Summary

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64926	vdb-entry, x_refsource_BID
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/694ad155b344	x_refsource_CONFIRM
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1053266	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://osvdb.org/102015	vdb-entry, x_refsource_OSVDB
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
https://exchange.xforce.ibmcloud.com/vulnerabilities/90347	vdb-entry, x_refsource_XF
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:22:31.467Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "64926",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64926"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/694ad155b344"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053266"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "102015",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/102015"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "oracle-cpujan2014-cve20135896(90347)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90347"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "64926",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64926"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/694ad155b344"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053266"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "102015",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/102015"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "oracle-cpujan2014-cve20135896(90347)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90347"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-5896",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "64926",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64926"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/694ad155b344",
              "refsource": "CONFIRM",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/694ad155b344"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1053266",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053266"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "102015",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/102015"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "oracle-cpujan2014-cve20135896(90347)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90347"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-5896",
    "datePublished": "2014-01-15T01:33:00",
    "dateReserved": "2013-09-18T00:00:00",
    "dateUpdated": "2024-08-06T17:22:31.467Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-5878

Vulnerability from cvelistv5

Published

2014-01-15 00:30

Modified

2024-08-06 17:22

Severity

Summary

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox.

References

URL	Tags
http://secunia.com/advisories/56432	third-party-advisory, x_refsource_SECUNIA
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1051823	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0135.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56535	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2089-1	vendor-advisory, x_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-0030.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0097.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56485	third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://osvdb.org/102005	vdb-entry, x_refsource_OSVDB
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	x_refsource_CONFIRM
http://www.securityfocus.com/bid/64927	vdb-entry, x_refsource_BID
http://marc.info/?l=bugtraq&m=139402697611681&w=2	vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2014-0027.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/56486	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1029608	vdb-entry, x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2124-1	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	vendor-advisory, x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2014-0026.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/64758	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	vendor-advisory, x_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0134.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:22:31.212Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56432"
          },
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051823"
          },
          {
            "name": "openSUSE-SU-2014:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
          },
          {
            "name": "SSRT101455",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "RHSA-2014:0135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
          },
          {
            "name": "56535",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56535"
          },
          {
            "name": "USN-2089-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2089-1"
          },
          {
            "name": "RHSA-2014:0030",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
          },
          {
            "name": "RHSA-2014:0097",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
          },
          {
            "name": "56485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56485"
          },
          {
            "name": "SSRT101454",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "102005",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/102005"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
          },
          {
            "name": "64927",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64927"
          },
          {
            "name": "HPSBUX02972",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
          },
          {
            "name": "RHSA-2014:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
          },
          {
            "name": "56486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56486"
          },
          {
            "name": "SUSE-SU-2014:0451",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
          },
          {
            "name": "HPSBUX02973",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
          },
          {
            "name": "1029608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029608"
          },
          {
            "name": "USN-2124-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2124-1"
          },
          {
            "name": "SUSE-SU-2014:0266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
          },
          {
            "name": "RHSA-2014:0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
          },
          {
            "name": "64758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/64758"
          },
          {
            "name": "SUSE-SU-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
          },
          {
            "name": "RHSA-2014:0134",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
          },
          {
            "name": "openSUSE-SU-2014:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2014:0177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.  NOTE: the previous information is from the January 2014 CPU.  Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "56432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56432"
        },
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051823"
        },
        {
          "name": "openSUSE-SU-2014:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
        },
        {
          "name": "SSRT101455",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "RHSA-2014:0135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
        },
        {
          "name": "56535",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56535"
        },
        {
          "name": "USN-2089-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2089-1"
        },
        {
          "name": "RHSA-2014:0030",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
        },
        {
          "name": "RHSA-2014:0097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
        },
        {
          "name": "56485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56485"
        },
        {
          "name": "SSRT101454",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "102005",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/102005"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
        },
        {
          "name": "64927",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64927"
        },
        {
          "name": "HPSBUX02972",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
        },
        {
          "name": "RHSA-2014:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
        },
        {
          "name": "56486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56486"
        },
        {
          "name": "SUSE-SU-2014:0451",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
        },
        {
          "name": "HPSBUX02973",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
        },
        {
          "name": "1029608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029608"
        },
        {
          "name": "USN-2124-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2124-1"
        },
        {
          "name": "SUSE-SU-2014:0266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
        },
        {
          "name": "RHSA-2014:0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
        },
        {
          "name": "64758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/64758"
        },
        {
          "name": "SUSE-SU-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
        },
        {
          "name": "RHSA-2014:0134",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
        },
        {
          "name": "openSUSE-SU-2014:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2014:0177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-5878",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.  NOTE: the previous information is from the January 2014 CPU.  Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56432"
            },
            {
              "name": "RHSA-2014:0414",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2014:0414"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1051823",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051823"
            },
            {
              "name": "openSUSE-SU-2014:0174",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html"
            },
            {
              "name": "SSRT101455",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "RHSA-2014:0135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0135.html"
            },
            {
              "name": "56535",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56535"
            },
            {
              "name": "USN-2089-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2089-1"
            },
            {
              "name": "RHSA-2014:0030",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html"
            },
            {
              "name": "RHSA-2014:0097",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0097.html"
            },
            {
              "name": "56485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56485"
            },
            {
              "name": "SSRT101454",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "102005",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/102005"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777"
            },
            {
              "name": "64927",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64927"
            },
            {
              "name": "HPSBUX02972",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402697611681\u0026w=2"
            },
            {
              "name": "RHSA-2014:0027",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0027.html"
            },
            {
              "name": "56486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56486"
            },
            {
              "name": "SUSE-SU-2014:0451",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html"
            },
            {
              "name": "HPSBUX02973",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=139402749111889\u0026w=2"
            },
            {
              "name": "1029608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029608"
            },
            {
              "name": "USN-2124-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2124-1"
            },
            {
              "name": "SUSE-SU-2014:0266",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html"
            },
            {
              "name": "RHSA-2014:0026",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0026.html"
            },
            {
              "name": "64758",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/64758"
            },
            {
              "name": "SUSE-SU-2014:0246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
            },
            {
              "name": "RHSA-2014:0134",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0134.html"
            },
            {
              "name": "openSUSE-SU-2014:0180",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2014:0177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-5878",
    "datePublished": "2014-01-15T00:30:00",
    "dateReserved": "2013-09-18T00:00:00",
    "dateUpdated": "2024-08-06T17:22:31.212Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-4578

Vulnerability from cvelistv5

Published

2017-12-29 22:00

Modified

2024-08-06 16:45

Severity

Summary

jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.

References

URL	Tags
https://access.redhat.com/errata/RHSA-2014:0414	vendor-advisory, x_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2015/02/08/6	mailing-list, x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2015/02/09/9	mailing-list, x_refsource_MLIST
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d5f36e1c927e	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1031471	x_refsource_CONFIRM

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:45:15.048Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2014:0414",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2014:0414"
          },
          {
            "name": "[oss-security] 20150208 CVE-2013-4578 OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/02/08/6"
          },
          {
            "name": "[oss-security] 20150209 Re: CVE-2013-4578 OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/02/09/9"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d5f36e1c927e"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1031471"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-09-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-29T21:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2014:0414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2014:0414"
        },
        {
          "name": "[oss-security] 20150208 CVE-2013-4578 OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/02/08/6"
        },
        {
          "name": "[oss-security] 20150209 Re: CVE-2013-4578 OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/02/09/9"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d5f36e1c927e"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1031471"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-4578",
    "datePublished": "2017-12-29T22:00:00",
    "dateReserved": "2013-06-12T00:00:00",
    "dateUpdated": "2024-08-06T16:45:15.048Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags