CVE-2014-2490
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows...
9.3 HighFix available
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Exploit likelihood
6.12%Up 2.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
CVE-2014-2490- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
CVE-2014-2490- Updated
- 2026-11-02
EUVDEUVD-2014-2526 No score
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
EUVD-2014-2526- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5vjw-xx6j-g68j No score
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows...
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
GHSA-5vjw-xx6j-g68j- Updated
- 2026-11-02
OSVMGASA-2014-0292 No score
Updated java-1.7.0-openjdk packages fix multiple vulnerabilities
Updated java-1.7.0-openjdk packages fix security vulnerabilities:
It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions (CVE-2014-4216, CVE-2014-4219).
A format string flaw was discovered in the Hotspot component event logger in OpenJDK. An untrusted Java application or applet could use this flaw to crash the Java Virtual Machine or, potentially, execute arbitrary code with the privileges of the Java Virtual Machine (CVE-2014-2490).
Multiple improper permission check issues were discovered in the Libraries component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2014-4223, CVE-2014-4262, CVE-2014-2483).
Multiple flaws were discovered in the JMX, Libraries, Security, and Serviceability components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions (CVE-2014-4209, CVE-2014-4218, CVE-2014-4221, CVE-2014-4252, CVE-2014-4266).
It was discovered that the RSA algorithm in the Security component in OpenJDK did not sufficiently perform blinding while performing operations that were using private keys. An attacker able to measure timing differences of those operations could possibly leak information about the used keys (CVE-2014-4244).
The Diffie-Hellman (DH) key exchange algorithm implementation in the Security component in OpenJDK failed to validate public DH parameters properly. This could cause OpenJDK to accept and use weak parameters, allowing an attacker to recover the negotiated key (CVE-2014-4263).
This update is based on IcedTea version 2.5.1, which fixes these issues, as well as several others.
- Record
MGASA-2014-0292- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score
java-1_7_0-openjdk-1.7.0.121-1.1 on GA media
These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10534-1- Updated
- 2026-11-02
Show 4 moreShow less
OSVSUSE-SU-2015:0336-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0336-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0833-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0833-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-2490 No score
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
UBUNTU-CVE-2014-2490- Updated
- 2026-11-02
OSVUSN-2319-1 No score
openjdk-7 vulnerabilities
Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2014-2483, CVE-2014-2490, CVE-2014-4216, CVE-2014-4219, CVE-2014-4223, CVE-2014-4262)
Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit these to expose sensitive data over the network. (CVE-2014-4209, CVE-2014-4244, CVE-2014-4263)
Two vulnerabilities were discovered in the OpenJDK JRE related to data integrity. (CVE-2014-4218, CVE-2014-4266)
A vulnerability was discovered in the OpenJDK JRE related to availability. An attacker could exploit this to cause a denial of service. (CVE-2014-4264)
Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit these to expose sensitive data over the network. (CVE-2014-4221, CVE-2014-4252, CVE-2014-4268)
- Record
USN-2319-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk-6Debian:6.0 |
before 6b33-1.13.5-2~deb6u1, plus listed versions 6b18-1.8.10-0+squeeze16b18-1.8.10-0+squeeze26b18-1.8.10-0~lenny16b18-1.8.10-0~lenny26b18-1.8.13-0+squeeze1 Show 45 moreShow less6b18-1.8.13-0+squeeze26b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-26b18-1.8.7-2~lenny16b18-1.8.7-2~squeeze16b18-1.8.7-36b18-1.8.7-46b18-1.8.7-56b18-1.8.9-0.16b18-1.8.9-0.1~squeeze16b20-1.9-16b20-1.9.1-16b20-1.9.2-16b20-1.9.2-26b20~pre1-16b20~pre1-26b21~pre1-16b22-1.10-16b22-1.10-26b22-1.10-36b22-1.10.1-16b22-1.10.1~pre1-16b23~pre10-16b23~pre11-16b23~pre2-16b23~pre2-26b23~pre3-16b23~pre4-16b23~pre4-26b23~pre5-16b23~pre6-16b23~pre6-1+s390x6b23~pre7-16b23~pre8-16b23~pre8-26b23~pre9-16b23~pre9-26b24-1.11-16b24-1.11-26b24-1.11-36b24-1.11-4 |
6b33-1.13.5-2~deb6u1 |
openjdk-6Debian:7 |
before 6b32-1.13.4-1~deb7u1, plus listed versions 6b27-1.12.5-16b27-1.12.5-26b27-1.12.6-16b27-1.12.6-1~deb6u16b27-1.12.6-1~deb7u1 Show 10 moreShow less6b27-1.12.7-16b27-1.12.7-26b29-1.13.0-16b29-1.13.0-26b30-1.13.1-16b30-1.13.2-16b30-1.13.2-26b31-1.13.3-16b31-1.13.3-1~deb6u16b31-1.13.3-1~deb7u1 |
6b32-1.13.4-1~deb7u1 |
openjdk-7Debian:7 |
before 7u65-2.5.1-2~deb7u1, plus listed versions 7u13-2.3.6-17u15-2.3.7-17u17-2.3.8-17u17-2.3.8-27u21-2.3.9-1 Show 40 moreShow less7u21-2.3.9-27u21-2.3.9-37u21-2.3.9-47u21-2.3.9-57u21-2.3.9-5+powerpcspe17u25-2.3.10-17u25-2.3.10-1+alpha7u25-2.3.10-1~deb7u17u25-2.3.10-27u25-2.3.10-2+powerpcspe17u25-2.3.12-17u25-2.3.12-1+alpha7u25-2.3.12-27u25-2.3.12-37u25-2.3.12-47u25-2.3.12-4+alpha7u3-2.1.7-17u45-2.4.3-17u45-2.4.3-2.37u45-2.4.3-37u45-2.4.3-47u45-2.4.3-4+alpha7u45-2.4.3-4+b1+alpha7u45-2.4.3-57u51-2.4.4-17u51-2.4.5-17u51-2.4.5-27u51-2.4.6-17u51-2.4.6~pre1-17u55-2.4.7-17u55-2.4.7-1~deb7u17u55-2.4.7-27u60-2.5.0-17u60-2.5.0-27u65-2.5.1-17u7-2.3.2-17u7-2.3.2a-17u9-2.3.3-17u9-2.3.4-17u9-2.3.5~pre1-1 |
7u65-2.5.1-2~deb7u1 |
java-1.7.0-openjdkMageia:3 |
before 1.7.0.65-2.5.1.1.mga3 | 1.7.0.65-2.5.1.1.mga3 |
java-1.7.0-openjdkMageia:4 |
before 1.7.0.65-2.5.1.1.mga4 | 1.7.0.65-2.5.1.1.mga4 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::client |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::client |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::client |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::client |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
Show 144 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::client |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::computenode |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::server |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::server |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::server |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::server |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::server |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::workstation |
before 1:1.7.0.65-2.5.1.2.el6_5 | 1:1.7.0.65-2.5.1.2.el6_5 |
java-1.7.0-openjdkRed Hat:enterprise_linux:7::client |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:7::client |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-headlessRed Hat:enterprise_linux:7::client |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-accessibilityRed Hat:enterprise_linux:7::client |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:7::client |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:7::client |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:7::client |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:7::client |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdkRed Hat:enterprise_linux:7::computenode |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:7::computenode |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-headlessRed Hat:enterprise_linux:7::computenode |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-accessibilityRed Hat:enterprise_linux:7::computenode |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:7::computenode |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:7::computenode |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:7::computenode |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:7::computenode |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdkRed Hat:enterprise_linux:7::server |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:7::server |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:7::server |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-headlessRed Hat:enterprise_linux:7::server |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-accessibilityRed Hat:enterprise_linux:7::server |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:7::server |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:7::server |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:7::server |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdkRed Hat:enterprise_linux:7::workstation |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:7::workstation |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:7::workstation |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-headlessRed Hat:enterprise_linux:7::workstation |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-accessibilityRed Hat:enterprise_linux:7::workstation |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:7::workstation |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:7::workstation |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:7::workstation |
before 1:1.7.0.65-2.5.1.2.el7_0 | 1:1.7.0.65-2.5.1.2.el7_0 |
java-1.7.0-openjdkRed Hat:enterprise_linux:5::client |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:5::client |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:5::client |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:5::client |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:5::client |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdkRed Hat:enterprise_linux:5::server |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:5::server |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:5::server |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:5::server |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:5::server |
before 1:1.7.0.65-2.5.1.2.el5_10 | 1:1.7.0.65-2.5.1.2.el5_10 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:5 |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:5 |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:5 |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:5 |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:5 |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:5 |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:6 |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:6 |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:7 |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:7 |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:7 |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:7 |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:7 |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:7 |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-6.1.13.4.el5_10 | 1:1.6.0.0-6.1.13.4.el5_10 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-6.1.13.4.el6_5 | 1:1.6.0.0-6.1.13.4.el6_5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:7::client |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:7::client |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:7::client |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:7::client |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:7::client |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:7::client |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:7::computenode |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:7::computenode |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:7::computenode |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:7::computenode |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:7::computenode |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:7::computenode |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:7::server |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:7::server |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:7::server |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:7::server |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:7::server |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:7::server |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:7::workstation |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:7::workstation |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:7::workstation |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:7::workstation |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:7::workstation |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:7::workstation |
before 1:1.6.0.0-6.1.13.4.el7_0 | 1:1.6.0.0-6.1.13.4.el7_0 |
openjdk-6Ubuntu:14.04:LTS |
before 6b32-1.13.4-4ubuntu0.14.04.1, plus listed versions 6b27-1.12.6-1ubuntu26b27-1.12.7-2ubuntu16b29-1.13.0-1ubuntu26b30-1.13.1-1ubuntu16b30-1.13.1-1ubuntu26b30-1.13.2-1ubuntu16b31-1.13.3-1ubuntu1 |
6b32-1.13.4-4ubuntu0.14.04.1 |
openjdk-7Ubuntu:14.04:LTS |
before 7u65-2.5.1-4ubuntu1~0.14.04.1, plus listed versions 7u25-2.3.12-4ubuntu37u25-2.3.12-4ubuntu57u45-2.4.3-3ubuntu17u45-2.4.3-3ubuntu27u45-2.4.3-4ubuntu1 Show 7 moreShow less7u45-2.4.3-4ubuntu27u51-2.4.4-1ubuntu17u51-2.4.5-1ubuntu17u51-2.4.6~pre1-1ubuntu27u51-2.4.6-1ubuntu37u51-2.4.6-1ubuntu47u55-2.4.7-1ubuntu1 |
7u65-2.5.1-4ubuntu1~0.14.04.1 |
java-1_7_0-openjdkopenSUSE:Tumbleweed |
before 1.7.0.121-1.1 | 1.7.0.121-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2490 is a high vulnerability (CVSS 9.3) in Debian Linux, published July 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.12%, the 93rd percentile. Fixed in openjdk-6 6b33-1.13.5-2~deb6u1.
References
debian.org/security/2014/dsa-2987
secunia.com/advisories/60129
vmware.com/security/advisories/VMSA-2014-0012.html
marc.info?l=bugtraq&m=140852886808946&w=2
securitytracker.com/id/1030577
Show 194 moreShow less
securityfocus.com/bid/68645
oracle.com/technetwork/topics/security/cpujul2014-1972956.html
seclists.org/fulldisclosure/2014/Dec/23
access.redhat.com/errata/RHSA-2014:0902
security.gentoo.org/glsa/glsa-201502-12.xml
nvd.nist.gov/vuln/detail/CVE-2014-2490
github.com/advisories/GHSA-5vjw-xx6j-g68j
advisories.mageia.org/MGASA-2014-0292.html
blog.fuseyism.com/index.php/2014/06/24/icedtea-2-5-0-for-openjdk-7-released-power-to-the-people
rhn.redhat.com/errata/RHSA-2014-0889.html
bugs.mageia.org/show_bug.cgi?id=13754
bugzilla.redhat.com/show_bug.cgi?id=1075795
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0889.json
cve.org/CVERecord?id=CVE-2014-2483
suse.com/support/update/announcement/2015/suse-su-20150336-1
bugzilla.suse.com/828665
ubuntu.com/security/CVE-2014-2490
hg.openjdk.java.net/jdk6/jdk6/hotspot/rev/dd7d490e72af
This page doesn't list everything
Left out here: 43 versions and 264 references. The JSON record has them.