PT-2015-1092 · Oracle+3 · Oracle Java Se+4

Publicado 2015-04-15 · Atualizado 2022-05-13 · CVE-2015-0470

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u40

Description The issue affects the integrity of data and is related to the Hotspot component. It allows remote attackers to exploit the vulnerability, although the specific vectors used are not detailed.

Recommendations For Oracle Java SE version 8u40, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-09958

CESA-2015_0809

CVE-2015-0470

DLA-213-1

DSA-3234-1

DSA-3235-1

DSA-3316-1

OPENSUSE-SU-2015_0773-1

RHSA-2015:0809

RHSA-2015:0854

RHSA-2015_0809

RHSA-2015_0854

Produtos afetados

Centos

Java Platform

Oracle Java Se

Red Hat

Suse

Referências · 122

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Nota
• https://github.com/fatlan/HAProxy-Keepalived-Sec-HighLoads · Nota
• https://lists.centos.org/pipermail/centos-announce/2015-April/070545.html · Nota
• https://bdu.fstec.ru/vul/2015-11010 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2015-0488 · Nota
• https://suse.com/security/cve/CVE-2015-0491.html · Nota
• https://suse.com/security/cve/CVE-2015-0459.html · Nota
• https://bdu.fstec.ru/vul/2015-10664 · Nota de Segurança
• http://debian.org/security/2015/dsa-3316 · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2015-0809.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-09955 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2015-0492 · Nota
• https://access.redhat.com/security/cve/CVE-2015-0478 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760 · Nota de Segurança