CVE-2014-6593
CVE-2014-6593
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.
EPSS 66.4% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
openjdk-6 Ubuntu:14.04:LTS
- Versions
- 6b27-1.12.6-1ubuntu2
- 6b27-1.12.7-2ubuntu1
- 6b29-1.13.0-1ubuntu2
- 6b30-1.13.1-1ubuntu1
- 6b30-1.13.1-1ubuntu2
- 6b30-1.13.2-1ubuntu1
- 6b31-1.13.3-1ubuntu1
- 6b32-1.13.4-4ubuntu0.14.04.1
- 6b33-1.13.5-1ubuntu0.14.04
- Affected ranges
- ECOSYSTEM: < 6b34-1.13.6-1ubuntu0.14.04.1
Update to 6b34-1.13.6-1ubuntu0.14.04.1
openjdk-7 Ubuntu:14.04:LTS
- Versions
- 7u25-2.3.12-4ubuntu3
- 7u25-2.3.12-4ubuntu5
- 7u45-2.4.3-3ubuntu1
- 7u45-2.4.3-3ubuntu2
- 7u45-2.4.3-4ubuntu1
- 7u45-2.4.3-4ubuntu2
- 7u51-2.4.4-1ubuntu1
- 7u51-2.4.5-1ubuntu1
- 7u51-2.4.6~pre1-1ubuntu2
- 7u51-2.4.6-1ubuntu3
- 7u51-2.4.6-1ubuntu4
- 7u55-2.4.7-1ubuntu1
- 7u65-2.5.1-4ubuntu1~0.14.04.1
- 7u65-2.5.1-4ubuntu1~0.14.04.2
- 7u65-2.5.2-3~14.04
- 7u71-2.5.3-0ubuntu0.14.04.1
- Affected ranges
- ECOSYSTEM: < 7u75-2.5.4-1~trusty1
Update to 7u75-2.5.4-1~trusty1
Original sources
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html
- http://www.debian.org/security/2015/dsa-3144
- http://rhn.redhat.com/errata/RHSA-2015-0136.html
- http://rhn.redhat.com/errata/RHSA-2015-0079.html
- https://www.exploit-db.com/exploits/38641/
- http://www.vmware.com/security/advisories/VMSA-2015-0003.html
- http://www.securityfocus.com/bid/72169
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- http://rhn.redhat.com/errata/RHSA-2015-0264.html
- http://www.ubuntu.com/usn/USN-2487-1
- http://packetstormsecurity.com/files/134251/Java-Secure-Socket-Extension-JSSE-SKIP-TLS.html
- http://rhn.redhat.com/errata/RHSA-2015-0085.html
- http://rhn.redhat.com/errata/RHSA-2015-0086.html
- https://security.gentoo.org/glsa/201603-14
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0080.html
- https://www-304.ibm.com/support/docview.wss?uid=swg21695474
- http://rhn.redhat.com/errata/RHSA-2015-0068.html
- http://www.ubuntu.com/usn/USN-2486-1
- https://security.gentoo.org/glsa/201507-14
- http://marc.info/?l=bugtraq&m=142496355704097&w=2
- http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581
- https://kc.mcafee.com/corporate/index?page=content&id=SB10104
- https://nvd.nist.gov/vuln/detail/CVE-2014-6593