CVE-2015-0460 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.3 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:C/I:C/A:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 90%

Affected Products (NVD)

Vendor	Product	Version
oracle	jdk	1.5.0
oracle	jdk	1.6.0
oracle	jdk	1.7.0
oracle	jdk	1.8.0
oracle	jre	1.5.0
oracle	jre	1.6.0
oracle	jre	1.7.0
oracle	jre	1.8.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

openjdk-8

sid	8u432-b06-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

openjdk-6

lucid	Fixed 6b35-1.13.7-1ubuntu0.10.04.2 released
precise	Fixed 6b35-1.13.7-1ubuntu0.12.04.2 released
trusty	Fixed 6b35-1.13.7-1ubuntu0.14.04.1 released
utopic	Fixed 6b35-1.13.7-1ubuntu0.14.10.1 released
vivid	not-affected

openjdk-7

lucid	dne
precise	Fixed 7u79-2.5.5-0ubuntu0.12.04.1 released
trusty	Fixed 7u79-2.5.5-0ubuntu0.14.04.2 released
utopic	Fixed 7u79-2.5.5-0ubuntu0.14.10.2 released
vivid	not-affected

openjdk-8

lucid	dne
precise	dne
trusty	dne
utopic	ignored
vivid	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

java-1_7_0-openjdk

suse enterprise sap 12	1.7.0.79-15.1 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.79-15.1 fixed
suse enterprise server 12 SP2	1.7.0.111-33.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-demo

suse enterprise sap 12	1.7.0.79-15.1 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.79-15.1 fixed
suse enterprise server 12 SP2	1.7.0.111-33.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-devel

suse enterprise sap 12	1.7.0.79-15.1 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.79-15.1 fixed
suse enterprise server 12 SP2	1.7.0.111-33.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-headless

suse enterprise sap 12	1.7.0.79-15.1 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.79-15.1 fixed
suse enterprise server 12 SP2	1.7.0.111-33.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

java-1.6.0-openjdk

RHEL 6	1:1.6.0.35-1.13.7.1.el6_6 fixed
RHEL 7	1:1.6.0.35-1.13.7.1.el7_1 fixed

java-1.6.0-openjdk-demo

RHEL 6	1:1.6.0.35-1.13.7.1.el6_6 fixed
RHEL 7	1:1.6.0.35-1.13.7.1.el7_1 fixed

java-1.6.0-openjdk-devel

RHEL 6	1:1.6.0.35-1.13.7.1.el6_6 fixed
RHEL 7	1:1.6.0.35-1.13.7.1.el7_1 fixed

java-1.6.0-openjdk-javadoc

RHEL 6	1:1.6.0.35-1.13.7.1.el6_6 fixed
RHEL 7	1:1.6.0.35-1.13.7.1.el7_1 fixed

java-1.6.0-openjdk-src

RHEL 6	1:1.6.0.35-1.13.7.1.el6_6 fixed
RHEL 7	1:1.6.0.35-1.13.7.1.el7_1 fixed

java-1.7.0-openjdk

RHEL 6	1:1.7.0.79-2.5.5.1.el6_6 fixed
RHEL 7	1:1.7.0.79-2.5.5.1.el7_1 fixed

java-1.7.0-openjdk-accessibility

RHEL 7

1:1.7.0.79-2.5.5.1.el7_1

fixed

java-1.7.0-openjdk-demo

RHEL 6	1:1.7.0.79-2.5.5.1.el6_6 fixed
RHEL 7	1:1.7.0.79-2.5.5.1.el7_1 fixed

java-1.7.0-openjdk-devel

RHEL 6	1:1.7.0.79-2.5.5.1.el6_6 fixed
RHEL 7	1:1.7.0.79-2.5.5.1.el7_1 fixed

java-1.7.0-openjdk-headless

RHEL 7

1:1.7.0.79-2.5.5.1.el7_1

fixed

java-1.7.0-openjdk-javadoc

RHEL 6	1:1.7.0.79-2.5.5.1.el6_6 fixed
RHEL 7	1:1.7.0.79-2.5.5.1.el7_1 fixed

java-1.7.0-openjdk-src

RHEL 6	1:1.7.0.79-2.5.5.1.el6_6 fixed
RHEL 7	1:1.7.0.79-2.5.5.1.el7_1 fixed

java-1.8.0-openjdk

RHEL 6	1:1.8.0.45-28.b13.el6_6 fixed
RHEL 7	1:1.8.0.45-30.b13.el7_1 fixed

java-1.8.0-openjdk-accessibility

RHEL 7

1:1.8.0.45-30.b13.el7_1

fixed

java-1.8.0-openjdk-demo

RHEL 6	1:1.8.0.45-28.b13.el6_6 fixed
RHEL 7	1:1.8.0.45-30.b13.el7_1 fixed

java-1.8.0-openjdk-devel

RHEL 6	1:1.8.0.45-28.b13.el6_6 fixed
RHEL 7	1:1.8.0.45-30.b13.el7_1 fixed

java-1.8.0-openjdk-headless

RHEL 6	1:1.8.0.45-28.b13.el6_6 fixed
RHEL 7	1:1.8.0.45-30.b13.el7_1 fixed

java-1.8.0-openjdk-javadoc

RHEL 6	1:1.8.0.45-28.b13.el6_6 fixed
RHEL 7	1:1.8.0.45-30.b13.el7_1 fixed

java-1.8.0-openjdk-src

RHEL 6	1:1.8.0.45-28.b13.el6_6 fixed
RHEL 7	1:1.8.0.45-30.b13.el7_1 fixed

References

http://advisories.mageia.org/MGASA-2015-0158.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html

http://rhn.redhat.com/errata/RHSA-2015-0806.html

http://rhn.redhat.com/errata/RHSA-2015-0807.html

http://rhn.redhat.com/errata/RHSA-2015-0808.html

http://rhn.redhat.com/errata/RHSA-2015-0809.html

http://rhn.redhat.com/errata/RHSA-2015-0854.html

http://rhn.redhat.com/errata/RHSA-2015-0857.html

http://rhn.redhat.com/errata/RHSA-2015-0858.html

http://www.debian.org/security/2015/dsa-3234

http://www.debian.org/security/2015/dsa-3235

http://www.debian.org/security/2015/dsa-3316

http://www.mandriva.com/security/advisories?name=MDVSA-2015:212

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html

http://www.securityfocus.com/bid/74097

http://www.securitytracker.com/id/1032120

http://www.ubuntu.com/usn/USN-2573-1

http://www.ubuntu.com/usn/USN-2574-1

https://security.gentoo.org/glsa/201603-11

http://advisories.mageia.org/MGASA-2015-0158.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html

http://rhn.redhat.com/errata/RHSA-2015-0806.html

http://rhn.redhat.com/errata/RHSA-2015-0807.html

http://rhn.redhat.com/errata/RHSA-2015-0808.html

http://rhn.redhat.com/errata/RHSA-2015-0809.html

http://rhn.redhat.com/errata/RHSA-2015-0854.html

http://rhn.redhat.com/errata/RHSA-2015-0857.html

http://rhn.redhat.com/errata/RHSA-2015-0858.html

http://www.debian.org/security/2015/dsa-3234

http://www.debian.org/security/2015/dsa-3235

http://www.debian.org/security/2015/dsa-3316

http://www.mandriva.com/security/advisories?name=MDVSA-2015:212

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html

http://www.securityfocus.com/bid/74097

http://www.securitytracker.com/id/1032120

http://www.ubuntu.com/usn/USN-2573-1

http://www.ubuntu.com/usn/USN-2574-1

https://security.gentoo.org/glsa/201603-11