PT-2014-1616 · Oracle+6 · Jrockit+8

Published 2014-07-16 · Updated 2024-06-15 · CVE-2014-4263

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Java SE versions 5.0u65, 6u75, 7u60, and 8u5 JRockit versions R27.8.2 and R28.3.2

Description The issue allows a remote attacker to compromise data confidentiality and integrity using Diffie-Hellman key agreement.

Recommendations For Java SE versions 5.0u65, 6u75, 7u60, and 8u5, update to a version that is not affected by this issue. For JRockit versions R27.8.2 and R28.3.2, update to a version that is not affected by this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-00534

BDU:2015-00579

CESA-2014_0889

CESA-2014_0907

CVE-2014-4263

DLA-96-1

DSA-2980-1

DSA-2987-1

HPSBUX03091

HPSBUX03092

MGASA-2014-0292

OPENSUSE-SU-2024:10534-1

RHSA-2014:0889

RHSA-2014:0890

RHSA-2014:0902

RHSA-2014:0907

RHSA-2014:0908

RHSA-2014:1033

RHSA-2014:1036

RHSA-2014:1041

RHSA-2014:1042

RHSA-2014_0889

RHSA-2014_0890

RHSA-2014_0902

RHSA-2014_0907

RHSA-2014_0908

RHSA-2014_1033

RHSA-2014_1036

RHSA-2014_1041

RHSA-2014_1042

RHSA-2015:0264

USN-2312-1

USN-2319-1

USN-2319-2

USN-2319-3

Affected Products

Centos

Hp-Ux

Ibm Aix

Jrockit

Java Platform

Java Se

Red Hat

Suse

Ubuntu

References · 635

• https://advisories.mageia.org/MGASA-2014-0292.html · Security Note
• https://bdu.fstec.ru/vul/2015-00007 · Security Note
• https://bdu.fstec.ru/vul/2015-00026 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2422 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0460 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218 · Security Note
• https://ubuntu.com/security/CVE-2014-4268 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0458 · Security Note
• https://ubuntu.com/security/CVE-2014-4266 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00563 · Security Note
• https://bdu.fstec.ru/vul/2015-00021 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1876 · Security Note
• https://bdu.fstec.ru/vul/2015-07110 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2412 · Security Note
• https://bdu.fstec.ru/vul/2014-00427 · Security Note