Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.108401
Category:General
Title:Oracle Java SE JRE Multiple Unspecified Vulnerabilities-03 (Feb 2015) - Linux
Summary:Oracle Java SE JRE is prone to multiple unspecified vulnerabilities.
Description:Summary:
Oracle Java SE JRE is prone to multiple unspecified vulnerabilities.

Vulnerability Insight:
Multiple unspecified flaws exist due to:

- An unspecified error in the JAX-WS component related to insufficient
privilege checks.

- Two unspecified errors in the Deployment component.

- An unspecified error in the 'Libraries' component.

- An error in vm/classfile/verifier.cpp script related to insufficient
verification of invokespecial calls.

- A NULL pointer dereference error in the MulticastSocket implementation.

Vulnerability Impact:
Successful exploitation will allow attackers
to gain escalated privileges, conduct a denial of service attack, bypass
sandbox restrictions and execute arbitrary code.

Affected Software/OS:
Oracle Java SE 6 update 85 and prior,
7 update 72 and prior, and 8 update 25 and prior on Linux.

Solution:
Apply the patch from the referenced advisory.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2015-0412
BugTraq ID: 72136
http://www.securityfocus.com/bid/72136
Debian Security Information: DSA-3144 (Google Search)
http://www.debian.org/security/2015/dsa-3144
Debian Security Information: DSA-3147 (Google Search)
http://www.debian.org/security/2015/dsa-3147
https://security.gentoo.org/glsa/201507-14
https://security.gentoo.org/glsa/201603-14
HPdes Security Advisory: HPSBUX03273
http://marc.info/?l=bugtraq&m=142496355704097&w=2
HPdes Security Advisory: HPSBUX03281
http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581
HPdes Security Advisory: SSRT101951
HPdes Security Advisory: SSRT101968
http://marc.info/?l=bugtraq&m=142607790919348&w=2
RedHat Security Advisories: RHSA-2015:0068
http://rhn.redhat.com/errata/RHSA-2015-0068.html
RedHat Security Advisories: RHSA-2015:0079
http://rhn.redhat.com/errata/RHSA-2015-0079.html
RedHat Security Advisories: RHSA-2015:0080
http://rhn.redhat.com/errata/RHSA-2015-0080.html
RedHat Security Advisories: RHSA-2015:0085
http://rhn.redhat.com/errata/RHSA-2015-0085.html
RedHat Security Advisories: RHSA-2015:0086
http://rhn.redhat.com/errata/RHSA-2015-0086.html
RedHat Security Advisories: RHSA-2015:0264
http://rhn.redhat.com/errata/RHSA-2015-0264.html
http://www.securitytracker.com/id/1031580
SuSE Security Announcement: SUSE-SU-2015:0336 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
SuSE Security Announcement: SUSE-SU-2015:0503 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html
SuSE Security Announcement: openSUSE-SU-2015:0190 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html
http://www.ubuntu.com/usn/USN-2486-1
http://www.ubuntu.com/usn/USN-2487-1
XForce ISS Database: oracle-cpujan2015-cve20150412(100140)
https://exchange.xforce.ibmcloud.com/vulnerabilities/100140
Common Vulnerability Exposure (CVE) ID: CVE-2015-0406
BugTraq ID: 72154
http://www.securityfocus.com/bid/72154
XForce ISS Database: oracle-cpujan2015-cve20150406(100147)
https://exchange.xforce.ibmcloud.com/vulnerabilities/100147
Common Vulnerability Exposure (CVE) ID: CVE-2015-0403
BugTraq ID: 72148
http://www.securityfocus.com/bid/72148
XForce ISS Database: oracle-cpujan2015-cve20150403(100145)
https://exchange.xforce.ibmcloud.com/vulnerabilities/100145
Common Vulnerability Exposure (CVE) ID: CVE-2015-0400
BugTraq ID: 72159
http://www.securityfocus.com/bid/72159
XForce ISS Database: oracle-cpujan2015-cve20150400(100149)
https://exchange.xforce.ibmcloud.com/vulnerabilities/100149
Common Vulnerability Exposure (CVE) ID: CVE-2014-6601
BugTraq ID: 72132
http://www.securityfocus.com/bid/72132
Common Vulnerability Exposure (CVE) ID: CVE-2014-6587
BugTraq ID: 72168
http://www.securityfocus.com/bid/72168
CopyrightCopyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.