PT-2014-1654 · Oracle+4 · Java Se+5

Published 2014-10-14 · Updated 2020-09-08 · CVE-2014-6476

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u67 through 8u20

Description The issue allows a remote attacker to compromise data integrity using the Deployment subcomponent. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For Oracle Java SE versions 7u67 through 8u20, update to a version that is not affected by this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-00572

CVE-2014-6476

HPSBUX03218

RHSA-2014:1657

RHSA-2014:1876

RHSA-2014:1880

RHSA-2014:1882

RHSA-2014_1657

RHSA-2014_1880

RHSA-2014_1882

Affected Products

Hp-Ux

Ibm Aix

Java Platform

Java Se

Red Hat

Suse

References · 102

• 🔥 https://github.com/mpgn/poodle-PoC · Exploit
• https://bdu.fstec.ru/vul/2015-00553 · Security Note
• https://bdu.fstec.ru/vul/2015-00548 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6504 · Security Note
• https://bdu.fstec.ru/vul/2015-00591 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531 · Security Note
• https://bdu.fstec.ru/vul/2015-00558 · Security Note
• https://bdu.fstec.ru/vul/2015-00590 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288 · Security Note
• https://bdu.fstec.ru/vul/2015-00642 · Security Note
• http://security.gentoo.org/glsa/glsa-201502-12.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6519 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558 · Security Note