PT-2015-6699 · Oracle+5 · Java Se+6

Publicado 2015-07-15 · Atualizado 2024-06-15 · CVE-2015-4760

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u95 through 8u45

Description The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Recommendations For Oracle Java SE versions 6u95 through 8u45, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CESA-2015_1228

CESA-2015_1229

CESA-2015_1526

CVE-2015-4760

DLA-283-1

DLA-303-1

DSA-3316-1

DSA-3323-1

DSA-3339-1

MGASA-2015-0277

MGASA-2015-0280

MGASA-2015-0297

OPENSUSE-SU-2015_1288-1

OPENSUSE-SU-2015_1289-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

RHSA-2015:1228

RHSA-2015:1229

RHSA-2015:1230

RHSA-2015:1241

RHSA-2015:1242

RHSA-2015:1243

RHSA-2015:1485

RHSA-2015:1486

RHSA-2015:1488

RHSA-2015:1526

RHSA-2015:1544

RHSA-2015:1604

RHSA-2015_1228

RHSA-2015_1229

RHSA-2015_1230

RHSA-2015_1241

RHSA-2015_1242

RHSA-2015_1243

RHSA-2015_1485

RHSA-2015_1486

RHSA-2015_1526

RHSA-2015_1544

SUSE-SU-2015:1319-1

SUSE-SU-2015:1320-1

SUSE-SU-2015:1329-1

SUSE-SU-2015:1331-1

SUSE-SU-2015:1345-1

SUSE-SU-2015:1375-1

SUSE-SU-2015:1509-1

USN-2696-1

USN-2706-1

USN-2740-1

Produtos afetados

Centos

Ibm Aix

Java Platform

Java Se

Red Hat

Suse

Ubuntu

Referências · 593

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• https://github.com/fatlan/HAProxy-Keepalived-Sec-HighLoads · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628 · Nota de Segurança
• https://suse.com/security/cve/CVE-2012-5070 · Nota
• https://access.redhat.com/security/cve/CVE-2015-2628 · Nota
• https://suse.com/security/cve/CVE-2015-4916 · Nota
• https://linux.oracle.com/errata/ELSA-2015-1526.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-4002 · Nota
• https://suse.com/security/cve/CVE-2015-0400 · Nota
• https://lists.centos.org/pipermail/centos-announce/2015-July/083409.html · Nota
• https://bdu.fstec.ru/vul/2015-09954 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-4835 · Nota
• https://ubuntu.com/security/notices/USN-2740-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-3829 · Nota
• https://rhn.redhat.com/errata/RHSA-2015-1228.html · Nota