PT-2015-5818 · Oracle+3 · Oracle Java Se+5

Publicado 2015-07-15 · Atualizado 2024-06-15 · CVE-2015-2659

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u45 Java SE Embedded version 8u33

Description The issue allows remote attackers to affect availability via unknown vectors related to Security. It enables remote attackers to impact data availability using the Security subcomponent.

Recommendations For Oracle Java SE version 8u45, update to a version that fixes the issue. For Java SE Embedded version 8u33, update to a version that fixes the issue. As a temporary workaround, consider restricting access to the Security component until a patch is available.

Correção

Identificadores relacionados

CESA-2015_1228

CVE-2015-2659

MGASA-2015-0280

OPENSUSE-SU-2015_1289-1

OPENSUSE-SU-2024:10197-1

RHSA-2015:1228

RHSA-2015:1241

RHSA-2015_1228

RHSA-2015_1241

Produtos afetados

Centos

Java Platform

Java Se Embedded

Oracle Java Se

Red Hat

Suse

Referências · 201

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Nota
• https://github.com/fatlan/HAProxy-Keepalived-Sec-HighLoads · Nota
• https://suse.com/security/cve/CVE-2015-4734 · Nota
• https://bdu.fstec.ru/vul/2015-11010 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-5597 · Nota
• https://suse.com/security/cve/CVE-2015-4844 · Nota
• https://suse.com/security/cve/CVE-2015-4749 · Nota
• https://suse.com/security/cve/CVE-2015-2613 · Nota
• https://suse.com/security/cve/CVE-2016-0636 · Nota
• https://access.redhat.com/security/cve/CVE-2015-2590 · Nota
• https://suse.com/security/cve/CVE-2016-3485 · Nota
• https://suse.com/security/cve/CVE-2015-4731.html · Nota
• https://suse.com/security/cve/CVE-2016-5554 · Nota
• https://suse.com/security/cve/CVE-2015-2597.html · Nota
• https://lists.centos.org/pipermail/centos-announce/2015-July/083410.html · Nota