CVE-2014-2402

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 16-04-2014 03:55

Last modified: - 13-05-2022 04:57

Total changes: - 3

Description

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

7.5

Base score

10.0

6.4

Exploitability score

Impact score

Verification logic

vendor=canonical AND product=ubuntu_linux AND version=13.10

vendor=canonical AND product=ubuntu_linux AND version=12.10

vendor=canonical AND product=ubuntu_linux AND version=14.04 AND software_edition=esm

vendor=oracle AND product=jdk AND version=1.7.0 AND update=update51

vendor=oracle AND product=jre AND version=1.7.0 AND update=update51

vendor=oracle AND product=jdk AND version=1.8.0 AND update=-

vendor=oracle AND product=jre AND version=1.8.0 AND update=-

Reference

http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
USN-2187-1-Third Party Advisory
66898-Third Party Advisory, VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg21672080
GLSA-201502-12-Third Party Advisory
SSRT101667-Issue Tracking, Mailing List, Third Party Advisory
RHSA-2014:0675-Third Party Advisory
RHSA-2014:0413-Third Party Advisory

Keywords

CVE-2014-2402

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2014-2402

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures