CVE-2014-6587 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.3 UNKNOWN	LOCAL	LOW		AV:L/AC:L/Au:S/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 35%

Affected Products (NVD)

Vendor	Product	Version
oracle	jdk	1.6.0
oracle	jdk	1.7.0
oracle	jdk	1.8.0
oracle	jre	1.6.0
oracle	jre	1.7.0
oracle	jre	1.8.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

openjdk-8

sid	8u432-b06-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

openjdk-6

lucid	Fixed 6b34-1.13.6-1ubuntu0.10.04.1 released
precise	Fixed 6b34-1.13.6-1ubuntu0.12.04.1 released
trusty	Fixed 6b34-1.13.6-1ubuntu0.14.04.1 released
utopic	Fixed 6b34-1.13.6-1ubuntu0.14.10.1 released

openjdk-7

lucid	dne
precise	Fixed 7u75-2.5.4-1~precise1 released
trusty	Fixed 7u75-2.5.4-1~trusty1 released
utopic	Fixed 7u75-2.5.4-1~utopic1 released

openjdk-8

lucid	dne
precise	dne
trusty	dne
utopic	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

java-1_7_0-openjdk

suse enterprise sap 12	1.7.0.75-11.3 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.75-11.3 fixed
suse enterprise server 12 SP2	1.7.0.111-33.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-demo

suse enterprise sap 12	1.7.0.75-11.3 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.75-11.3 fixed
suse enterprise server 12 SP2	1.7.0.111-33.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-devel

suse enterprise sap 12	1.7.0.75-11.3 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.75-11.3 fixed
suse enterprise server 12 SP2	1.7.0.111-33.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-headless

suse enterprise sap 12	1.7.0.75-11.3 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.75-11.3 fixed
suse enterprise server 12 SP2	1.7.0.111-33.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

java-1.6.0-ibm

RHEL 6

1:1.6.0.16.3-1jpp.1.el6_6

fixed

java-1.6.0-ibm-demo

RHEL 6

1:1.6.0.16.3-1jpp.1.el6_6

fixed

java-1.6.0-ibm-devel

RHEL 6

1:1.6.0.16.3-1jpp.1.el6_6

fixed

java-1.6.0-ibm-javacomm

RHEL 6

1:1.6.0.16.3-1jpp.1.el6_6

fixed

java-1.6.0-ibm-jdbc

RHEL 6

1:1.6.0.16.3-1jpp.1.el6_6

fixed

java-1.6.0-ibm-plugin

RHEL 6

1:1.6.0.16.3-1jpp.1.el6_6

fixed

java-1.6.0-ibm-src

RHEL 6

1:1.6.0.16.3-1jpp.1.el6_6

fixed

java-1.6.0-openjdk

RHEL 6	1:1.6.0.34-1.13.6.1.el6_6 fixed
RHEL 7	1:1.6.0.34-1.13.6.1.el7_0 fixed

java-1.6.0-openjdk-demo

RHEL 6	1:1.6.0.34-1.13.6.1.el6_6 fixed
RHEL 7	1:1.6.0.34-1.13.6.1.el7_0 fixed

java-1.6.0-openjdk-devel

RHEL 6	1:1.6.0.34-1.13.6.1.el6_6 fixed
RHEL 7	1:1.6.0.34-1.13.6.1.el7_0 fixed

java-1.6.0-openjdk-javadoc

RHEL 6	1:1.6.0.34-1.13.6.1.el6_6 fixed
RHEL 7	1:1.6.0.34-1.13.6.1.el7_0 fixed

java-1.6.0-openjdk-src

RHEL 6	1:1.6.0.34-1.13.6.1.el6_6 fixed
RHEL 7	1:1.6.0.34-1.13.6.1.el7_0 fixed

java-1.7.0-openjdk

RHEL 6	1:1.7.0.75-2.5.4.0.el6_6 fixed
RHEL 7	1:1.7.0.75-2.5.4.2.el7_0 fixed

java-1.7.0-openjdk-accessibility

RHEL 7

1:1.7.0.75-2.5.4.2.el7_0

fixed

java-1.7.0-openjdk-demo

RHEL 6	1:1.7.0.75-2.5.4.0.el6_6 fixed
RHEL 7	1:1.7.0.75-2.5.4.2.el7_0 fixed

java-1.7.0-openjdk-devel

RHEL 6	1:1.7.0.75-2.5.4.0.el6_6 fixed
RHEL 7	1:1.7.0.75-2.5.4.2.el7_0 fixed

java-1.7.0-openjdk-headless

RHEL 7

1:1.7.0.75-2.5.4.2.el7_0

fixed

java-1.7.0-openjdk-javadoc

RHEL 6	1:1.7.0.75-2.5.4.0.el6_6 fixed
RHEL 7	1:1.7.0.75-2.5.4.2.el7_0 fixed

java-1.7.0-openjdk-src

RHEL 6	1:1.7.0.75-2.5.4.0.el6_6 fixed
RHEL 7	1:1.7.0.75-2.5.4.2.el7_0 fixed

java-1.7.1-ibm

RHEL 6	1:1.7.1.2.10-1jpp.3.el6_6 fixed
RHEL 7	1:1.7.1.2.10-1jpp.3.el7_0 fixed

java-1.7.1-ibm-demo

RHEL 6	1:1.7.1.2.10-1jpp.3.el6_6 fixed
RHEL 7	1:1.7.1.2.10-1jpp.3.el7_0 fixed

java-1.7.1-ibm-devel

RHEL 6	1:1.7.1.2.10-1jpp.3.el6_6 fixed
RHEL 7	1:1.7.1.2.10-1jpp.3.el7_0 fixed

java-1.7.1-ibm-jdbc

RHEL 6	1:1.7.1.2.10-1jpp.3.el6_6 fixed
RHEL 7	1:1.7.1.2.10-1jpp.3.el7_0 fixed

java-1.7.1-ibm-plugin

RHEL 6	1:1.7.1.2.10-1jpp.3.el6_6 fixed
RHEL 7	1:1.7.1.2.10-1jpp.3.el7_0 fixed

java-1.7.1-ibm-src

RHEL 6	1:1.7.1.2.10-1jpp.3.el6_6 fixed
RHEL 7	1:1.7.1.2.10-1jpp.3.el7_0 fixed

java-1.8.0-openjdk

RHEL 6

1:1.8.0.31-1.b13.el6_6

fixed

java-1.8.0-openjdk-demo

RHEL 6

1:1.8.0.31-1.b13.el6_6

fixed

java-1.8.0-openjdk-devel

RHEL 6

1:1.8.0.31-1.b13.el6_6

fixed

java-1.8.0-openjdk-headless

RHEL 6

1:1.8.0.31-1.b13.el6_6

fixed

java-1.8.0-openjdk-javadoc

RHEL 6

1:1.8.0.31-1.b13.el6_6

fixed

java-1.8.0-openjdk-src

RHEL 6

1:1.8.0.31-1.b13.el6_6

fixed

References

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html

http://marc.info/?l=bugtraq&m=142496355704097&w=2

http://marc.info/?l=bugtraq&m=142607790919348&w=2

http://rhn.redhat.com/errata/RHSA-2015-0068.html

http://rhn.redhat.com/errata/RHSA-2015-0079.html

http://rhn.redhat.com/errata/RHSA-2015-0080.html

http://rhn.redhat.com/errata/RHSA-2015-0085.html

http://rhn.redhat.com/errata/RHSA-2015-0086.html

http://rhn.redhat.com/errata/RHSA-2015-0264.html

http://www.debian.org/security/2015/dsa-3144

http://www.debian.org/security/2015/dsa-3147

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

http://www.securityfocus.com/bid/72168

http://www.securitytracker.com/id/1031580

http://www.ubuntu.com/usn/USN-2486-1

http://www.ubuntu.com/usn/USN-2487-1

http://www.vmware.com/security/advisories/VMSA-2015-0003.html

https://security.gentoo.org/glsa/201507-14

https://security.gentoo.org/glsa/201603-14

https://www-304.ibm.com/support/docview.wss?uid=swg21695474

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html

http://marc.info/?l=bugtraq&m=142496355704097&w=2

http://marc.info/?l=bugtraq&m=142607790919348&w=2

http://rhn.redhat.com/errata/RHSA-2015-0068.html

http://rhn.redhat.com/errata/RHSA-2015-0079.html

http://rhn.redhat.com/errata/RHSA-2015-0080.html

http://rhn.redhat.com/errata/RHSA-2015-0085.html

http://rhn.redhat.com/errata/RHSA-2015-0086.html

http://rhn.redhat.com/errata/RHSA-2015-0264.html

http://www.debian.org/security/2015/dsa-3144

http://www.debian.org/security/2015/dsa-3147

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

http://www.securityfocus.com/bid/72168

http://www.securitytracker.com/id/1031580

http://www.ubuntu.com/usn/USN-2486-1

http://www.ubuntu.com/usn/USN-2487-1

http://www.vmware.com/security/advisories/VMSA-2015-0003.html

https://security.gentoo.org/glsa/201507-14

https://security.gentoo.org/glsa/201603-14

https://www-304.ibm.com/support/docview.wss?uid=swg21695474