CVE-2014-0878
26.05.2014, 19:55
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | java_sdk | 6.0.0.0 |
| ibm | java_sdk | 6.0.1.0 |
| ibm | java_sdk | 6.0.2.0 |
| ibm | java_sdk | 6.0.3.0 |
| ibm | java_sdk | 6.0.4.0 |
| ibm | java_sdk | 6.0.5.0 |
| ibm | java_sdk | 6.0.6.0 |
| ibm | java_sdk | 6.0.7.0 |
| ibm | java_sdk | 6.0.8.0 |
| ibm | java_sdk | 6.0.8.1 |
| ibm | java_sdk | 6.0.9.0 |
| ibm | java_sdk | 6.0.9.1 |
| ibm | java_sdk | 6.0.9.2 |
| ibm | java_sdk | 6.0.10.0 |
| ibm | java_sdk | 6.0.10.1 |
| ibm | java_sdk | 6.0.11.0 |
| ibm | java_sdk | 6.0.12.0 |
| ibm | java_sdk | 6.0.13.0 |
| ibm | java_sdk | 6.0.13.1 |
| ibm | java_sdk | 6.0.13.2 |
| ibm | java_sdk | 6.0.14.0 |
| ibm | java_sdk | 6.0.15.0 |
| ibm | java_sdk | 6.0.15.1 |
| ibm | java_sdk | 5.0.0.0 |
| ibm | java_sdk | 5.0.11.0 |
| ibm | java_sdk | 5.0.11.1 |
| ibm | java_sdk | 5.0.11.2 |
| ibm | java_sdk | 5.0.12.0 |
| ibm | java_sdk | 5.0.12.1 |
| ibm | java_sdk | 5.0.12.2 |
| ibm | java_sdk | 5.0.12.3 |
| ibm | java_sdk | 5.0.12.4 |
| ibm | java_sdk | 5.0.12.5 |
| ibm | java_sdk | 5.0.13.0 |
| ibm | java_sdk | 5.0.14.0 |
| ibm | java_sdk | 5.0.15.0 |
| ibm | java_sdk | 5.0.16.0 |
| ibm | java_sdk | 5.0.16.1 |
| ibm | java_sdk | 5.0.16.2 |
| ibm | java_sdk | 5.0.16.3 |
| ibm | java_sdk | 5.0.16.4 |
| ibm | java_sdk | 5.0.16.5 |
| ibm | java_sdk | 7.0.0.0 |
| ibm | java_sdk | 7.0.1.0 |
| ibm | java_sdk | 7.0.2.0 |
| ibm | java_sdk | 7.0.3.0 |
| ibm | java_sdk | 7.0.4.0 |
| ibm | java_sdk | 7.0.4.1 |
| ibm | java_sdk | 7.0.4.2 |
| ibm | java_sdk | 7.0.5.0 |
| ibm | java_sdk | 7.0.6.0 |
| ibm | java_sdk | 7.0.6.1 |
| ibm | java_sdk | 7.1.0.0 |
𝑥
= Vulnerable software versions
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| java-1.5.0-ibm |
| ||
| java-1.5.0-ibm-demo |
| ||
| java-1.5.0-ibm-devel |
| ||
| java-1.5.0-ibm-javacomm |
| ||
| java-1.5.0-ibm-jdbc |
| ||
| java-1.5.0-ibm-plugin |
| ||
| java-1.5.0-ibm-src |
| ||
| java-1.6.0-ibm |
| ||
| java-1.6.0-ibm-demo |
| ||
| java-1.6.0-ibm-devel |
| ||
| java-1.6.0-ibm-javacomm |
| ||
| java-1.6.0-ibm-jdbc |
| ||
| java-1.6.0-ibm-plugin |
| ||
| java-1.6.0-ibm-src |
| ||
| java-1.7.0-ibm |
| ||
| java-1.7.0-ibm-demo |
| ||
| java-1.7.0-ibm-devel |
| ||
| java-1.7.0-ibm-jdbc |
| ||
| java-1.7.0-ibm-plugin |
| ||
| java-1.7.0-ibm-src |
| ||
| java-1.7.1-ibm |
| ||
| java-1.7.1-ibm-demo |
| ||
| java-1.7.1-ibm-devel |
| ||
| java-1.7.1-ibm-jdbc |
| ||
| java-1.7.1-ibm-plugin |
| ||
| java-1.7.1-ibm-src |
|
Common Weakness Enumeration
References