CVE-2013-2436
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
9.3 High
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-1488 and CVE-2013-2426. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "type checks" and "method handle binding" involving Wrapper.convert.
Exploit likelihood
5.69%Up 2.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-1488 and CVE-2013-2426. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "type checks" and "method handle binding" involving Wrapper.convert.
- Record
CVE-2013-2436- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-1488 and CVE-2013-2426. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "type checks" and "method handle binding" involving Wrapper.convert.
- Record
CVE-2013-2436- Updated
- 2026-11-02
EUVDEUVD-2013-2382 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-1488 and CVE-2013-2426. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "type checks" and "method handle binding" involving Wrapper.convert.
- Record
EUVD-2013-2382- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6hc9-6xww-76p2 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-1488 and CVE-2013-2426. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "type checks" and "method handle binding" involving Wrapper.convert.
- Record
GHSA-6hc9-6xww-76p2- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score
java-1_7_0-openjdk-1.7.0.121-1.1 on GA media
These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10534-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
Show 45 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 22 CVEs |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-oracleRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-develRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracleRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-develRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibmRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 32 CVEs |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1_7_0-openjdkopenSUSE:Tumbleweed From an advisory covering 304 CVEs |
before 1.7.0.121-1.1 | 1.7.0.121-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2436 is a high vulnerability (CVSS 9.3) in Oracle Jdk, published April 17, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.69%, the 93rd percentile. No source names a fixed version.
References
security.gentoo.org/glsa/glsa-201406-32.xml
us-cert.gov/ncas/alerts/TA13-107A
wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130
rhn.redhat.com/errata/RHSA-2013-0757.html
hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/20f287fec09f
mandriva.com/security/advisories?name=MDVSA-2013:161
Show 194 moreShow less
www-01.ibm.com/support/docview.wss?uid=swg21644197
lists.opensuse.org/opensuse-updates/2013-06/msg00099.html
bugzilla.redhat.com/show_bug.cgi?id=952550
ubuntu.com/usn/USN-1806-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16540
oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released
nvd.nist.gov/vuln/detail/CVE-2013-2436
github.com/advisories/GHSA-6hc9-6xww-76p2
access.redhat.com/errata/RHSA-2013:0751
icedtea.classpath.org/hg/release/icedtea7-2.3/file/icedtea-2.3.9/NEWS
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0751.json
cve.org/CVERecord?id=CVE-2013-0401
cisa.gov/known-exploited-vulnerabilities-catalog
ibm.com/developerworks/java/jdk/alerts
isg.rhul.ac.uk/tls
openssl.org/news/secadv_20130205.txt
polarssl.org/tech-updates/releases/polarssl-1.2.5-released
suse.com/security/cve/CVE-2011-3563
This page doesn't list everything
Left out here: 300 references. The JSON record has them.