CVE-2013-0401
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update...
10.0 HighFix available
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
Exploit likelihood
10.3%Down 1.9 points since Feb 4, 2022
What each source reports
NVD Score used
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
- Record
CVE-2013-0401- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
- Record
CVE-2013-0401- Updated
- 2026-11-02
EUVDEUVD-2013-0412 No score
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
- Record
EUVD-2013-0412- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7fc2-vc87-69w8 No score
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update...
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
- Record
GHSA-7fc2-vc87-69w8- Weakness
- CWE-94
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score
java-1_7_0-openjdk-1.7.0.121-1.1 on GA media
These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10534-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0343-1 No score
Security update for IBM Java
java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.
These security issues have been fixed:
* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect confidentiality, integrity, and
availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect integrity via unknown vectors related to
Deployment, a different vulnerability than CVE-2014-6527
(CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified…
- Record
SUSE-SU-2015:0343-1- Updated
- 2026-11-02
Show 6 moreShow less
OSVSUSE-SU-2015:0344-1 No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:0344-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0392-1 No score
Security update for IBM Java 6
IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:0392-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-1 No score
Security update for IBM Java 6
IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:1086-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-2 No score
Security update for IBM Java
java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.
These security issues has been fixed:
* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
remote attackers to affect integrity via unknown vectors related to
Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
remote…
- Record
SUSE-SU-2015:1086-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-3 No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:1086-3- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-4 No score
Security update for IBM Java
java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.
These security issues have been fixed:
* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect confidentiality, integrity, and
availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect integrity via unknown vectors related to
Deployment, a different vulnerability than CVE-2014-6527
(CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified…
- Record
SUSE-SU-2015:1086-4- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdkRed Hat:enterprise_linux:6::client |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::client |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::client |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::client |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::client |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
Show 125 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::server |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::server |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::server |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::server |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::server |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.19-2.3.9.1.el6_4 | 1:1.7.0.19-2.3.9.1.el6_4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:5::server |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:5::server |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:5::server |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:5::server |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:5::server |
before 1:1.7.0.19-2.3.9.1.el5_9 | 1:1.7.0.19-2.3.9.1.el5_9 |
java-1.7.0-oracleRed Hat:rhel_extras:5::server |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-develRed Hat:rhel_extras:5::server |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:5::server |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:5::server |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:5::server |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:5::server |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracleRed Hat:rhel_extras:6 |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-develRed Hat:rhel_extras:6 |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:6 |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:6 |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:6 |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:6 |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sunRed Hat:rhel_extras:6 |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.40.1.11.11.el5_9 | 1:1.6.0.0-1.40.1.11.11.el5_9 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.61.1.11.11.el6_4 | 1:1.6.0.0-1.61.1.11.11.el6_4 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.7.0.4.2-1jpp.1.el5_9 | 1:1.7.0.4.2-1jpp.1.el5_9 |
java-1.7.0-ibmRed Hat:rhel_extras:6 |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.7.0.4.2-1jpp.1.el6_4 | 1:1.7.0.4.2-1jpp.1.el6_4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.13.2-1jpp.1.el5_9 | 1:1.6.0.13.2-1jpp.1.el5_9 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.13.2-1jpp.1.el5_9 | 1:1.6.0.13.2-1jpp.1.el5_9 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.13.2-1jpp.1.el5_9 | 1:1.6.0.13.2-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.13.2-1jpp.1.el5_9 | 1:1.6.0.13.2-1jpp.1.el5_9 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.13.2-1jpp.1.el5_9 | 1:1.6.0.13.2-1jpp.1.el5_9 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.13.2-1jpp.1.el5_9 | 1:1.6.0.13.2-1jpp.1.el5_9 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.13.2-1jpp.1.el5_9 | 1:1.6.0.13.2-1jpp.1.el5_9 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.13.2-1jpp.1.el5_9 | 1:1.6.0.13.2-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.13.2-1jpp.1.el6_4 | 1:1.6.0.13.2-1jpp.1.el6_4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.13.2-1jpp.1.el6_4 | 1:1.6.0.13.2-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.13.2-1jpp.1.el6_4 | 1:1.6.0.13.2-1jpp.1.el6_4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.13.2-1jpp.1.el6_4 | 1:1.6.0.13.2-1jpp.1.el6_4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.13.2-1jpp.1.el6_4 | 1:1.6.0.13.2-1jpp.1.el6_4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.13.2-1jpp.1.el6_4 | 1:1.6.0.13.2-1jpp.1.el6_4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.13.2-1jpp.1.el6_4 | 1:1.6.0.13.2-1jpp.1.el6_4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.2-1jpp.1.el5_9 | 1:1.5.0.16.2-1jpp.1.el5_9 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.2-1jpp.1.el5_9 | 1:1.5.0.16.2-1jpp.1.el5_9 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.2-1jpp.1.el5_9 | 1:1.5.0.16.2-1jpp.1.el5_9 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.2-1jpp.1.el5_9 | 1:1.5.0.16.2-1jpp.1.el5_9 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.2-1jpp.1.el5_9 | 1:1.5.0.16.2-1jpp.1.el5_9 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.2-1jpp.1.el5_9 | 1:1.5.0.16.2-1jpp.1.el5_9 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.2-1jpp.1.el5_9 | 1:1.5.0.16.2-1jpp.1.el5_9 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.2-1jpp.1.el5_9 | 1:1.5.0.16.2-1jpp.1.el5_9 |
java-1.5.0-ibmRed Hat:rhel_extras:6 |
before 1:1.5.0.16.2-1jpp.1.el6_4 | 1:1.5.0.16.2-1jpp.1.el6_4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.5.0.16.2-1jpp.1.el6_4 | 1:1.5.0.16.2-1jpp.1.el6_4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.5.0.16.2-1jpp.1.el6_4 | 1:1.5.0.16.2-1jpp.1.el6_4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.5.0.16.2-1jpp.1.el6_4 | 1:1.5.0.16.2-1jpp.1.el6_4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.5.0.16.2-1jpp.1.el6_4 | 1:1.5.0.16.2-1jpp.1.el6_4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.5.0.16.2-1jpp.1.el6_4 | 1:1.5.0.16.2-1jpp.1.el6_4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.5.0.16.2-1jpp.1.el6_4 | 1:1.5.0.16.2-1jpp.1.el6_4 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibmRed Hat:network_satellite:5.5::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.5::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:network_satellite:5.5::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.5::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1_7_0-openjdkopenSUSE:Tumbleweed |
before 1.7.0.121-1.1 | 1.7.0.121-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0401 is a high vulnerability (CVSS 10.0) in Oracle Jdk, published March 8, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.3%, the 95th percentile. Fixed in java-1.7.0-openjdk 1:1.7.0.19-2.3.9.1.el6_4.
References
lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html
security.gentoo.org/glsa/glsa-201406-32.xml
mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html
rhn.redhat.com/errata/RHSA-2013-0758.html
mandriva.com/security/advisories?name=MDVSA-2013:145
Show 194 moreShow less
us-cert.gov/ncas/alerts/TA13-107A
blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released
marc.info?l=bugtraq&m=137283787217316&w=2
wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
zdnet.com/pwn2own-down-go-all-the-browsers-7000012283
twitter.com/thezdi/status/309784608508100608
ubuntu.com/usn/USN-1806-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16297
bugzilla.redhat.com/show_bug.cgi?id=920245
hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/31c782610044
oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
nvd.nist.gov/vuln/detail/CVE-2013-0401
github.com/advisories/GHSA-7fc2-vc87-69w8
access.redhat.com/errata/RHSA-2013:0751
icedtea.classpath.org/hg/release/icedtea7-2.3/file/icedtea-2.3.9/NEWS
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0751.json
cve.org/CVERecord?id=CVE-2013-0401
cisa.gov/known-exploited-vulnerabilities-catalog
ibm.com/developerworks/java/jdk/alerts
isg.rhul.ac.uk/tls
openssl.org/news/secadv_20130205.txt
polarssl.org/tech-updates/releases/polarssl-1.2.5-released
xforce.iss.net/xforce/xfdb/78764
kb.cert.org/vuls/id/225657
suse.com/support/update/announcement/2015/suse-su-20150343-1
bugzilla.suse.com/592934
This page doesn't list everything
Left out here: 1,037 references and the rest of 7 source descriptions. The JSON record has them.