PT-2015-2505 · Oracle+4 · Java Se Embedded+6

Published 2015-10-21 · Updated 2024-06-15 · CVE-2015-4868

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u60 Oracle Java SE Embedded version 8u51

Description The issue is related to errors in the code of the Libraries subcomponent of the Java Platform. It allows remote attackers to affect confidentiality, integrity, and availability. Exploitation of the issue may enable a remote attacker to execute arbitrary code using specially crafted data for an API function.

Recommendations For Oracle Java SE version 8u60, update to a version that contains a fix for this issue. For Oracle Java SE Embedded version 8u51, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the Libraries subcomponent to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-11870

CESA-2015_1919

CVE-2015-4868

MGASA-2015-0412

OPENSUSE-SU-2015_1905-1

OPENSUSE-SU-2016_0270-1

OPENSUSE-SU-2024:10197-1

RHSA-2015:1919

RHSA-2015:1926

RHSA-2015_1919

RHSA-2015_1926

USN-2784-1

Affected Products

Centos

Java Platform

Java Se

Java Se Embedded

Red Hat

Suse

Ubuntu

References · 252

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835 · Security Note
• https://bdu.fstec.ru/vul/2015-12011 · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0412 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11849 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806 · Security Note
• https://bdu.fstec.ru/vul/2015-11891 · Security Note
• https://ubuntu.com/security/CVE-2015-4835 · Vendor Advisory
• http://oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11899 · Security Note
• https://bdu.fstec.ru/vul/2015-11843 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-4868 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1919.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842 · Security Note
• https://cve.org/CVERecord?id=CVE-2015-4868 · Security Note
• https://ubuntu.com/security/CVE-2015-4893 · Vendor Advisory