CVE-2014-4263

EUVD-2014-4192
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
oraclejrockit
r27.8.2
oraclejrockit
r28.3.2
oraclejdk
1.5.0
oraclejdk
1.6.0
oraclejdk
1.7.0
oraclejdk
1.8.0
oraclejre
1.5.0
oraclejre
1.6.0
oraclejre
1.7.0
oraclejre
1.8.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-6
lucid
Fixed 6b32-1.13.4-1ubuntu1~0.10.04.1
released
precise
Fixed 6b32-1.13.4-1ubuntu1~0.12.04.1
released
trusty
Fixed 6b32-1.13.4-4ubuntu0.14.04.1
released
openjdk-6b18
lucid
ignored
precise
dne
trusty
dne
openjdk-7
lucid
dne
precise
Fixed 7u65-2.5.1-4ubuntu1~0.12.04.1
released
trusty
Fixed 7u65-2.5.1-1ubuntu1~0.14.04.1
released
References