CVE-2014-2397

CRITICO 9.3CVE-2014-2397 · Published 16/04/2014 · updated 17/06/2026

In breve

CVE-2014-2397 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda jdk (oracle), jre (oracle).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.5%, superiore al 92.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
jdk oracle	`= 1.7.0= 1.8.0`	No fix yet
jre oracle	`= 1.7.0= 1.8.0`	No fix yet

Description

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

References

marc.info · Issue Tracking
rhn.redhat.com/errata/RHSA-2014-0675.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0685.html · Third Party Advisory
secunia.com/advisories/58415 · Third Party Advisory
security.gentoo.org/glsa/glsa-201406-32.xml · Third Party Advisory
security.gentoo.org/glsa/glsa-201502-12.xml · Third Party Advisory
debian.org/security/2014/dsa-2912 · Third Party Advisory
oracle.com/technetwork/topics/security/cpuapr2014-1972952.html · Vendor Advisory
securityfocus.com/bid/66893 · Third Party Advisory
ubuntu.com/usn/USN-2187-1 · Third Party Advisory
ubuntu.com/usn/USN-2191-1 · Third Party Advisory
access.redhat.com/errata/RHSA-2014:0413 · Third Party Advisory

Altre vulnerabilità di jdk

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jdk

oracle

= 1.7.0= 1.8.0

No fix yet

jre

oracle

= 1.7.0= 1.8.0

No fix yet

Altre vulnerabilità di jdk

Vedi tutto →