CVE-2014-3068
IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6...
6.4 MediumFix available
IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.
Exploit likelihood
1.15%Unchanged since Feb 4, 2022
What each source reports
NVD Score used
IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.
- Record
CVE-2014-3068- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.
- Record
CVE-2014-3068- Updated
- 2026-11-02
EUVDEUVD-2014-3089 No score
IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.
- Record
EUVD-2014-3089- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-24mr-4mwr-24fg No score
IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6...
IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.
- Record
GHSA-24mr-4mwr-24fg- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
Show 64 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.1-1jpp.1.el5_10 | 1:1.6.0.16.1-1jpp.1.el5_10 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.16.1-1jpp.1.el6_5 | 1:1.6.0.16.1-1jpp.1.el6_5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.16.1-1jpp.1.el6_5 | 1:1.6.0.16.1-1jpp.1.el6_5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.16.1-1jpp.1.el6_5 | 1:1.6.0.16.1-1jpp.1.el6_5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.16.1-1jpp.1.el6_5 | 1:1.6.0.16.1-1jpp.1.el6_5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.16.1-1jpp.1.el6_5 | 1:1.6.0.16.1-1jpp.1.el6_5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.16.1-1jpp.1.el6_5 | 1:1.6.0.16.1-1jpp.1.el6_5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.16.1-1jpp.1.el6_5 | 1:1.6.0.16.1-1jpp.1.el6_5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.7-1jpp.1.el5_10 | 1:1.5.0.16.7-1jpp.1.el5_10 |
java-1.5.0-ibmRed Hat:rhel_extras:6 |
before 1:1.5.0.16.7-1jpp.1.el6_5 | 1:1.5.0.16.7-1jpp.1.el6_5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.5.0.16.7-1jpp.1.el6_5 | 1:1.5.0.16.7-1jpp.1.el6_5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.5.0.16.7-1jpp.1.el6_5 | 1:1.5.0.16.7-1jpp.1.el6_5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.5.0.16.7-1jpp.1.el6_5 | 1:1.5.0.16.7-1jpp.1.el6_5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.5.0.16.7-1jpp.1.el6_5 | 1:1.5.0.16.7-1jpp.1.el6_5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.5.0.16.7-1jpp.1.el6_5 | 1:1.5.0.16.7-1jpp.1.el6_5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.5.0.16.7-1jpp.1.el6_5 | 1:1.5.0.16.7-1jpp.1.el6_5 |
java-1.7.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibmRed Hat:rhel_extras:6 |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.1-ibmRed Hat:rhel_extras:7 |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:7 |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.7.1-ibm-develRed Hat:rhel_extras:7 |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:7 |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:7 |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:7 |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.6.0-ibmRed Hat:network_satellite:5.6::el5 |
before 1:1.6.0.16.3-1jpp.1.el5 | 1:1.6.0.16.3-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.6::el5 |
before 1:1.6.0.16.3-1jpp.1.el5 | 1:1.6.0.16.3-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.6::el6 |
before 1:1.6.0.16.3-1jpp.1.el6 | 1:1.6.0.16.3-1jpp.1.el6 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.6::el6 |
before 1:1.6.0.16.3-1jpp.1.el6 | 1:1.6.0.16.3-1jpp.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3068 is a medium vulnerability (CVSS 6.4) in Ibm Java, published December 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 67th percentile. Fixed in java-1.6.0-ibm 1:1.6.0.16.1-1jpp.1.el5_10.
References
exchange.xforce.ibmcloud.com/vulnerabilities/93756
www-01.ibm.com/support/docview.wss?uid=swg1IV66876
bugzilla.redhat.com/show_bug.cgi?id=1164201
rhn.redhat.com/errata/RHSA-2015-0264.html
Show 193 moreShow less
nvd.nist.gov/vuln/detail/CVE-2014-3068
github.com/advisories/GHSA-24mr-4mwr-24fg
access.redhat.com/errata/RHSA-2014:1033
ibm.com/developerworks/java/jdk/alerts
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1033.json
cve.org/CVERecord?id=CVE-2014-3068
xforce.iss.net/xforce/xfdb/93756
oracle.com/technetwork/topics/security/cpujul2014-1972956.html