CVE-2013-3829

7 documents6 sources

Severity

6.4MEDIUM

EPSS

2.1%

top 16.04%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle JDK Oracle JRE SUN JDK +1 more

Timeline

PublishedOct 16

Latest updateMay 14

Description

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages4 packages

▶NVDoracle/jdk1.7.0+5

▶NVDoracle/jre1.7.0+5

▶NVDsun/jdk1.5.0, 1.6.0+1

▶NVDsun/jre1.5.0, 1.6.0+1

🔴Vulnerability Details

GHSA

GHSA-p8hc-mqcm-847r: Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5↗2022-05-14

▶

CVEList

CVE-2013-3829: Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5↗2013-10-16

▶

📋Vendor Advisories

Ubuntu

OpenJDK 7 vulnerabilities↗2014-01-23

▶

Ubuntu

OpenJDK 6 vulnerabilities↗2013-11-21

▶

Red Hat

OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)↗2013-10-15

▶

💬Community

Bugzilla

CVE-2013-3829 OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)↗2013-10-15

▶