CVE-2014-2405

CRITICAL 10.0CVE-2014-2405 · Published 14/05/2014 · updated 17/06/2026

In short

CVE-2014-2405 is a CRITICAL (CVSS 10.0) vulnerability affecting openjdk (oracle).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openjdk oracle	`= 1.6.0`	No fix yet

Description

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462.

References

secunia.com/advisories/58415 · Vendor Advisory
debian.org/security/2014/dsa-2912
ubuntu.com/usn/USN-2191-1

More vulnerabilities in openjdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free