PT-2015-1669 · Oracle+5 · Java Se+6

Published 2015-07-15 · Updated 2024-06-15 · CVE-2015-2632

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java SE versions 6u95, 7u80, and 8u45

Description The issue is related to errors in the code of the Java Platform, allowing a remote attacker to compromise the confidentiality of information. The vulnerability is connected to the 2D subcomponent.

Recommendations For Java SE version 6u95, update to a version that includes the fix for this issue. For Java SE version 7u80, update to a version that includes the fix for this issue. For Java SE version 8u45, update to a version that includes the fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-11015

CESA-2015_1228

CESA-2015_1229

CESA-2015_1526

CVE-2015-2632

DLA-303-1

DLA-381-1

DLA-545-1

DSA-3316-1

DSA-3339-1

DSA-3725-1

MGASA-2015-0277

MGASA-2015-0280

OPENSUSE-SU-2015_1288-1

OPENSUSE-SU-2015_1289-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

RHSA-2015:1228

RHSA-2015:1229

RHSA-2015:1230

RHSA-2015:1241

RHSA-2015:1242

RHSA-2015:1243

RHSA-2015:1485

RHSA-2015:1486

RHSA-2015:1488

RHSA-2015:1526

RHSA-2015:1544

RHSA-2015:1604

RHSA-2015_1228

RHSA-2015_1229

RHSA-2015_1230

RHSA-2015_1241

RHSA-2015_1242

RHSA-2015_1243

RHSA-2015_1485

RHSA-2015_1486

RHSA-2015_1526

RHSA-2015_1544

SUSE-SU-2015:1319-1

SUSE-SU-2015:1320-1

SUSE-SU-2015:1329-1

SUSE-SU-2015:1331-1

SUSE-SU-2015:1345-1

SUSE-SU-2015:1375-1

SUSE-SU-2015:1509-1

USN-2696-1

USN-2706-1

USN-2740-1

Affected Products

Centos

Ibm Aix

Java Platform

Java Se

Red Hat

Suse

Ubuntu

References · 590

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628 · Security Note
• https://linux.oracle.com/errata/ELSA-2015-1526.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09954 · Security Note
• https://ubuntu.com/security/notices/USN-2740-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1526.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-4000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-4749 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1331-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-3316-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/icu · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-2632 · Security Note
• https://bdu.fstec.ru/vul/2016-00161 · Security Note
• https://bdu.fstec.ru/vul/2015-11009 · Security Note
• https://osv.dev/vulnerability/DSA-3725-1 · Vendor Advisory