CVE-2013-2450

MEDIUM 5.0CVE-2013-2450 · Published 18/06/2013 · updated 16/06/2026

In short

CVE-2013-2450 is a MEDIUM (CVSS 5.0) vulnerability affecting jdk (oracle), jre (oracle), jdk (sun).
Chance of exploitation in the next 30 days (EPSS): 5.1%, higher than 92.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk oracle	`= 1.5.0= 1.6.0= 1.7.0≤ 1.5.0≤ 1.6.0≤ 1.7.0`	No fix yet
jre oracle	`= 1.5.0= 1.6.0= 1.7.0≤ 1.5.0≤ 1.6.0≤ 1.7.0`	No fix yet
jdk sun	`= 1.5.0= 1.6.0`	No fix yet
jre sun	`= 1.5.0= 1.6.0`	No fix yet

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.

References

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free