PT-2015-1669 · Oracle+5 · Java Se+6

Publicado 2015-07-15 · Atualizado 2024-06-15 · CVE-2015-2632

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java SE versions 6u95, 7u80, and 8u45

Description The issue is related to errors in the code of the Java Platform, allowing a remote attacker to compromise the confidentiality of information. The vulnerability is connected to the 2D subcomponent.

Recommendations For Java SE version 6u95, update to a version that includes the fix for this issue. For Java SE version 7u80, update to a version that includes the fix for this issue. For Java SE version 8u45, update to a version that includes the fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-11015

CESA-2015_1228

CESA-2015_1229

CESA-2015_1526

CVE-2015-2632

DLA-303-1

DLA-381-1

DLA-545-1

DSA-3316-1

DSA-3339-1

DSA-3725-1

MGASA-2015-0277

MGASA-2015-0280

OPENSUSE-SU-2015_1288-1

OPENSUSE-SU-2015_1289-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

RHSA-2015:1228

RHSA-2015:1229

RHSA-2015:1230

RHSA-2015:1241

RHSA-2015:1242

RHSA-2015:1243

RHSA-2015:1485

RHSA-2015:1486

RHSA-2015:1488

RHSA-2015:1526

RHSA-2015:1544

RHSA-2015:1604

RHSA-2015_1228

RHSA-2015_1229

RHSA-2015_1230

RHSA-2015_1241

RHSA-2015_1242

RHSA-2015_1243

RHSA-2015_1485

RHSA-2015_1486

RHSA-2015_1526

RHSA-2015_1544

SUSE-SU-2015:1319-1

SUSE-SU-2015:1320-1

SUSE-SU-2015:1329-1

SUSE-SU-2015:1331-1

SUSE-SU-2015:1345-1

SUSE-SU-2015:1375-1

SUSE-SU-2015:1509-1

USN-2696-1

USN-2706-1

USN-2740-1

Produtos afetados

Centos

Ibm Aix

Java Platform

Java Se

Red Hat

Suse

Ubuntu

Referências · 590

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• https://github.com/fatlan/HAProxy-Keepalived-Sec-HighLoads · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628 · Nota de Segurança
• https://suse.com/security/cve/CVE-2012-5070 · Nota
• https://access.redhat.com/security/cve/CVE-2015-2628 · Nota
• https://suse.com/security/cve/CVE-2015-4916 · Nota
• https://linux.oracle.com/errata/ELSA-2015-1526.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-4002 · Nota
• https://suse.com/security/cve/CVE-2015-0400 · Nota
• https://lists.centos.org/pipermail/centos-announce/2015-July/083409.html · Nota
• https://bdu.fstec.ru/vul/2015-09954 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-4835 · Nota
• https://ubuntu.com/security/notices/USN-2740-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-3829 · Nota
• https://rhn.redhat.com/errata/RHSA-2015-1228.html · Nota