PT-2015-1084 · Oracle+4 · Java Se+5

Published 2015-04-14 · Updated 2024-06-15 · CVE-2015-0460

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions 5.0u81, 6u91, 7u76, and 8u40

Description The issue allows a remote attacker to compromise the confidentiality, integrity, and availability of data using the Hotspot component. The estimated number of potentially affected devices worldwide is not specified. Details about real-world incidents where this issue was exploited are not provided.

Recommendations For Java SE version 5.0u81, update to a version that contains a fix for this issue. For Java SE version 6u91, update to a version that contains a fix for this issue. For Java SE version 7u76, update to a version that contains a fix for this issue. For Java SE version 8u40, update to a version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-09950

CESA-2015_0806

CESA-2015_0808

CESA-2015_0809

CVE-2015-0460

DLA-213-1

DSA-3234-1

DSA-3235-1

DSA-3316-1

MGASA-2015-0158

OPENSUSE-SU-2015_0773-1

OPENSUSE-SU-2015_0774-1

OPENSUSE-SU-2024:10534-1

RHSA-2015:0806

RHSA-2015:0807

RHSA-2015:0808

RHSA-2015:0809

RHSA-2015:0854

RHSA-2015:0857

RHSA-2015:0858

RHSA-2015_0806

RHSA-2015_0807

RHSA-2015_0808

RHSA-2015_0809

RHSA-2015_0854

RHSA-2015_0857

RHSA-2015_0858

SUSE-SU-2015:0789-1

USN-2573-1

USN-2574-1

Affected Products

Centos

Java Platform

Java Se

Red Hat

Suse

Ubuntu

References · 486

• https://bdu.fstec.ru/vul/2015-11010 · Security Note
• http://debian.org/security/2015/dsa-3316 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-0808.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0858.html · Vendor Advisory
• http://debian.org/security/2015/dsa-3234 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732 · Security Note
• https://security-tracker.debian.org/tracker/source-package/openjdk-7 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-0460 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-3234-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00291 · Security Note
• https://bdu.fstec.ru/vul/2015-11015 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-0806.html · Vendor Advisory
• http://ubuntu.com/usn/USN-2573-1 · Vendor Advisory