CVE ID:	CVE-2014-0411
Description:	Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2014.0246.1   1.3.6.1.4.1.25623.1.1.4.2014.0266.2   1.3.6.1.4.1.25623.1.1.4.2014.0266.1   1.3.6.1.4.1.25623.1.1.4.2014.0266.3
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0411 BugTraq ID: 64758 http://www.securityfocus.com/bid/64758 BugTraq ID: 64918 http://www.securityfocus.com/bid/64918 HPdes Security Advisory: HPSBUX02972 http://marc.info/?l=bugtraq&m=139402697611681&w=2 HPdes Security Advisory: HPSBUX02973 http://marc.info/?l=bugtraq&m=139402749111889&w=2 HPdes Security Advisory: SSRT101454 http://marc.info/?l=bugtraq&m=139402697611681&w=2 HPdes Security Advisory: SSRT101455 http://marc.info/?l=bugtraq&m=139402749111889&w=2 http://osvdb.org/102028 RedHat Security Advisories: RHSA-2014:0026 http://rhn.redhat.com/errata/RHSA-2014-0026.html RedHat Security Advisories: RHSA-2014:0027 http://rhn.redhat.com/errata/RHSA-2014-0027.html RedHat Security Advisories: RHSA-2014:0030 http://rhn.redhat.com/errata/RHSA-2014-0030.html RedHat Security Advisories: RHSA-2014:0097 http://rhn.redhat.com/errata/RHSA-2014-0097.html RedHat Security Advisories: RHSA-2014:0134 http://rhn.redhat.com/errata/RHSA-2014-0134.html RedHat Security Advisories: RHSA-2014:0135 http://rhn.redhat.com/errata/RHSA-2014-0135.html RedHat Security Advisories: RHSA-2014:0136 http://rhn.redhat.com/errata/RHSA-2014-0136.html RedHat Security Advisories: RHSA-2014:0414 https://access.redhat.com/errata/RHSA-2014:0414 http://www.securitytracker.com/id/1029608 http://secunia.com/advisories/56432 http://secunia.com/advisories/56485 http://secunia.com/advisories/56486 http://secunia.com/advisories/56487 http://secunia.com/advisories/56535 http://secunia.com/advisories/57809 http://secunia.com/advisories/59037 http://secunia.com/advisories/59071 http://secunia.com/advisories/59082 http://secunia.com/advisories/59194 http://secunia.com/advisories/59235 http://secunia.com/advisories/59251 http://secunia.com/advisories/59254 http://secunia.com/advisories/59283 http://secunia.com/advisories/59324 http://secunia.com/advisories/59339 http://secunia.com/advisories/59665 http://secunia.com/advisories/59704 http://secunia.com/advisories/59705 http://secunia.com/advisories/59872 http://secunia.com/advisories/60005 http://secunia.com/advisories/60498 http://secunia.com/advisories/60833 http://secunia.com/advisories/60835 http://secunia.com/advisories/60836 SuSE Security Announcement: SUSE-SU-2014:0246 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html SuSE Security Announcement: SUSE-SU-2014:0266 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html SuSE Security Announcement: SUSE-SU-2014:0451 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html SuSE Security Announcement: openSUSE-SU-2014:0174 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html SuSE Security Announcement: openSUSE-SU-2014:0177 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html SuSE Security Announcement: openSUSE-SU-2014:0180 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html http://www.ubuntu.com/usn/USN-2089-1 http://www.ubuntu.com/usn/USN-2124-1 XForce ISS Database: oracle-cpujan2014-cve20140411(90357) https://exchange.xforce.ibmcloud.com/vulnerabilities/90357