RHSA-2014_0675

Vulnerability from csaf_redhat - Published: 2014-06-10 12:13 - Updated: 2024-11-14 14:28
Summary
Red Hat Security Advisory: java-1.7.0-openjdk security update
Severity
Critical
Notes
Topic: Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
Details: The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when processed. A remote attacker, or an untrusted Java application or applet, could possibly use this flaw to execute arbitrary code with the privileges of the user running the Java Virtual Machine. (CVE-2014-0429) Multiple flaws were discovered in the Hotspot and 2D components in OpenJDK. An untrusted Java application or applet could use these flaws to trigger Java Virtual Machine memory corruption and possibly bypass Java sandbox restrictions. (CVE-2014-0456, CVE-2014-2397, CVE-2014-2421) Multiple improper permission check issues were discovered in the Libraries component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. (CVE-2014-0457, CVE-2014-0455, CVE-2014-0461) Multiple improper permission check issues were discovered in the AWT, JAX-WS, JAXB, Libraries, Security, Sound, and 2D components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2014-2412, CVE-2014-0451, CVE-2014-0458, CVE-2014-2423, CVE-2014-0452, CVE-2014-2414, CVE-2014-2402, CVE-2014-0446, CVE-2014-2413, CVE-2014-0454, CVE-2014-2427, CVE-2014-0459) Multiple flaws were identified in the Java Naming and Directory Interface (JNDI) DNS client. These flaws could make it easier for a remote attacker to perform DNS spoofing attacks. (CVE-2014-0460) It was discovered that the JAXP component did not properly prevent access to arbitrary files when a SecurityManager was present. This flaw could cause a Java application using JAXP to leak sensitive information, or affect application availability. (CVE-2014-2403) It was discovered that the Security component in OpenJDK could leak some timing information when performing PKCS#1 unpadding. This could possibly lead to the disclosure of some information that was meant to be protected by encryption. (CVE-2014-0453) It was discovered that the fix for CVE-2013-5797 did not properly resolve input sanitization flaws in javadoc. When javadoc documentation was generated from an untrusted Java source code and hosted on a domain not controlled by the code author, these issues could make it easier to perform cross-site scripting (XSS) attacks. (CVE-2014-2398) An insecure temporary file use flaw was found in the way the unpack200 utility created log files. A local attacker could possibly use this flaw to perform a symbolic link attack and overwrite arbitrary files with the privileges of the user running unpack200. (CVE-2014-1876) Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website. All users of java-1.7.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Affected products
Product Identifier Version Remediation
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.src —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.55-2.4.7.2.el7_0.noarch —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.src —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.55-2.4.7.2.el7_0.noarch —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.src —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.55-2.4.7.2.el7_0.noarch —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.src —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.55-2.4.7.2.el7_0.noarch —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.src —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.55-2.4.7.2.el7_0.noarch —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.src —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.55-2.4.7.2.el7_0.noarch —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.src —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.55-2.4.7.2.el7_0.noarch —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.src —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-demo-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-devel-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-headless-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.55-2.4.7.2.el7_0.noarch —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.ppc64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.s390x —
Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:java-1.7.0-openjdk-src-1:1.7.0.55-2.4.7.2.el7_0.x86_64 —
Vendor Fix fix
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Important

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Important

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Important

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Important

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Important

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Critical

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.

CWE-377 - Insecure Temporary File
Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Low

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Low

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Important

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Important

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Moderate

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Important

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Critical

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Important

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.

Affected products
Fixed 184 products, the same list as for CVE-2014-0429
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2014:0675 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=1060907 external
https://bugzilla.redhat.com/show_bug.cgi?id=1086632 external
https://bugzilla.redhat.com/show_bug.cgi?id=1086645 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087409 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087411 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087413 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087417 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087423 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087424 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087426 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087427 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087428 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087430 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087431 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087434 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087436 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087438 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087439 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087440 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087441 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087442 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087443 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087444 external
https://bugzilla.redhat.com/show_bug.cgi?id=1087446 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2014-0429 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087409 external
https://www.cve.org/CVERecord?id=CVE-2014-0429 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0429 external
http://www.oracle.com/technetwork/topics/security… external
https://access.redhat.com/security/cve/CVE-2014-0446 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087439 external
https://www.cve.org/CVERecord?id=CVE-2014-0446 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0446 external
https://access.redhat.com/security/cve/CVE-2014-0451 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087428 external
https://www.cve.org/CVERecord?id=CVE-2014-0451 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0451 external
https://access.redhat.com/security/cve/CVE-2014-0452 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087436 external
https://www.cve.org/CVERecord?id=CVE-2014-0452 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0452 external
https://access.redhat.com/security/cve/CVE-2014-0453 self
https://bugzilla.redhat.com/show_bug.cgi?id=1086645 external
https://www.cve.org/CVERecord?id=CVE-2014-0453 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0453 external
https://access.redhat.com/security/cve/CVE-2014-0454 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087440 external
https://www.cve.org/CVERecord?id=CVE-2014-0454 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0454 external
https://access.redhat.com/security/cve/CVE-2014-0455 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087424 external
https://www.cve.org/CVERecord?id=CVE-2014-0455 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0455 external
https://access.redhat.com/security/cve/CVE-2014-0456 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087413 external
https://www.cve.org/CVERecord?id=CVE-2014-0456 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0456 external
https://access.redhat.com/security/cve/CVE-2014-0457 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087411 external
https://www.cve.org/CVERecord?id=CVE-2014-0457 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0457 external
https://access.redhat.com/security/cve/CVE-2014-0458 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087430 external
https://www.cve.org/CVERecord?id=CVE-2014-0458 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0458 external
https://access.redhat.com/security/cve/CVE-2014-0459 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087444 external
https://www.cve.org/CVERecord?id=CVE-2014-0459 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0459 external
https://access.redhat.com/security/cve/CVE-2014-0460 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087442 external
https://www.cve.org/CVERecord?id=CVE-2014-0460 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0460 external
https://access.redhat.com/security/cve/CVE-2014-0461 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087426 external
https://www.cve.org/CVERecord?id=CVE-2014-0461 external
https://nvd.nist.gov/vuln/detail/CVE-2014-0461 external
https://access.redhat.com/security/cve/CVE-2014-1876 self
https://bugzilla.redhat.com/show_bug.cgi?id=1060907 external
https://www.cve.org/CVERecord?id=CVE-2014-1876 external
https://nvd.nist.gov/vuln/detail/CVE-2014-1876 external
https://access.redhat.com/security/cve/CVE-2014-2397 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087423 external
https://www.cve.org/CVERecord?id=CVE-2014-2397 external
https://nvd.nist.gov/vuln/detail/CVE-2014-2397 external
https://access.redhat.com/security/cve/CVE-2014-2398 self
https://bugzilla.redhat.com/show_bug.cgi?id=1086632 external
https://www.cve.org/CVERecord?id=CVE-2014-2398 external
https://nvd.nist.gov/vuln/detail/CVE-2014-2398 external
https://access.redhat.com/security/cve/CVE-2014-2402 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087438 external
https://www.cve.org/CVERecord?id=CVE-2014-2402 external
https://nvd.nist.gov/vuln/detail/CVE-2014-2402 external
https://access.redhat.com/security/cve/CVE-2014-2403 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087443 external
https://www.cve.org/CVERecord?id=CVE-2014-2403 external
https://nvd.nist.gov/vuln/detail/CVE-2014-2403 external
https://access.redhat.com/security/cve/CVE-2014-2412 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087427 external
https://www.cve.org/CVERecord?id=CVE-2014-2412 external
https://nvd.nist.gov/vuln/detail/CVE-2014-2412 external
https://access.redhat.com/security/cve/CVE-2014-2413 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087446 external
https://www.cve.org/CVERecord?id=CVE-2014-2413 external
https://nvd.nist.gov/vuln/detail/CVE-2014-2413 external
https://access.redhat.com/security/cve/CVE-2014-2414 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087431 external
https://www.cve.org/CVERecord?id=CVE-2014-2414 external
https://nvd.nist.gov/vuln/detail/CVE-2014-2414 external
https://access.redhat.com/security/cve/CVE-2014-2421 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087417 external
https://www.cve.org/CVERecord?id=CVE-2014-2421 external
https://nvd.nist.gov/vuln/detail/CVE-2014-2421 external
https://access.redhat.com/security/cve/CVE-2014-2423 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087434 external
https://www.cve.org/CVERecord?id=CVE-2014-2423 external
https://nvd.nist.gov/vuln/detail/CVE-2014-2423 external
https://access.redhat.com/security/cve/CVE-2014-2427 self
https://bugzilla.redhat.com/show_bug.cgi?id=1087441 external
https://www.cve.org/CVERecord?id=CVE-2014-2427 external
https://nvd.nist.gov/vuln/detail/CVE-2014-2427 external
Acknowledgments

Loading 1.4 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…