p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de openjdk-7 · Página 8

Vulnerabilidades publicadas para openjdk-7 en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 204

  1. CVE-2015-2590

    Crítica · CVSS 9.8EPSS 25,47%En el catálogo KEVCorrección disponible

    CVE-2015-2590

    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.

    • Actualiza a 7u79-2.5.6-0ubuntu1.14.04.1
    Publicación Actualización
  2. CVE-2015-4000

    Baja · CVSS 3.7EPSS 99,86%Código de explotación públicoCorrección disponible

    CVE-2015-4000

    The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.

    • Actualiza a 7u79-2.5.6-0ubuntu1.14.04.1
    Publicación Actualización
  3. CVE-2015-2808

    Baja · CVSS 3.7EPSS 73,85%Corrección disponible

    CVE-2015-2808

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

    • Actualiza a 7u79-2.5.6-0ubuntu1.14.04.1
    Publicación Actualización
  4. CVE-2015-0410

    Sin evaluarEPSS 5,03%Corrección disponible

    CVE-2015-0410

    Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.

    • Actualiza a 7u75-2.5.4-1~trusty1
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →