CVE-2013-2426
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
9.3 High
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect invocation of the defaultReadObject method in the ConcurrentHashMap class, which allows remote attackers to bypass the Java sandbox.
Exploit likelihood
5.69%Up 1.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect invocation of the defaultReadObject method in the ConcurrentHashMap class, which allows remote attackers to bypass the Java sandbox.
- Record
CVE-2013-2426- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect invocation of the defaultReadObject method in the ConcurrentHashMap class, which allows remote attackers to bypass the Java sandbox.
- Record
CVE-2013-2426- Updated
- 2026-11-02
EUVDEUVD-2013-2372 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect invocation of the defaultReadObject method in the ConcurrentHashMap class, which allows remote attackers to bypass the Java sandbox.
- Record
EUVD-2013-2372- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2hfv-vqxq-gp7v No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect invocation of the defaultReadObject method in the ConcurrentHashMap class, which allows remote attackers to bypass the Java sandbox.
- Record
GHSA-2hfv-vqxq-gp7v- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score
java-1_7_0-openjdk-1.7.0.121-1.1 on GA media
These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10534-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
Show 75 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-oracleRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-develRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracleRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-develRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibmRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1_7_0-openjdkopenSUSE:Tumbleweed From an advisory covering 304 CVEs |
before 1.7.0.121-1.1 | 1.7.0.121-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2426 is a high vulnerability (CVSS 9.3) in Oracle Jdk, published April 17, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.69%, the 93rd percentile. No source names a fixed version.
References
security.gentoo.org/glsa/glsa-201406-32.xml
mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html
mandriva.com/security/advisories?name=MDVSA-2013:145
us-cert.gov/ncas/alerts/TA13-107A
blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released
wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130
Show 194 moreShow less
rhn.redhat.com/errata/RHSA-2013-0757.html
lists.opensuse.org/opensuse-updates/2013-05/msg00017.html
bugzilla.redhat.com/show_bug.cgi?id=952653
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16683
ubuntu.com/usn/USN-1806-1
hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/98ad2f1e25d1
oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
nvd.nist.gov/vuln/detail/CVE-2013-2426
github.com/advisories/GHSA-2hfv-vqxq-gp7v
access.redhat.com/errata/RHSA-2013:0751
icedtea.classpath.org/hg/release/icedtea7-2.3/file/icedtea-2.3.9/NEWS
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0751.json
cve.org/CVERecord?id=CVE-2013-0401
cisa.gov/known-exploited-vulnerabilities-catalog
ibm.com/developerworks/java/jdk/alerts
isg.rhul.ac.uk/tls
openssl.org/news/secadv_20130205.txt
polarssl.org/tech-updates/releases/polarssl-1.2.5-released
suse.com/security/cve/CVE-2011-3563
This page doesn't list everything
Left out here: 308 references. The JSON record has them.