CVE-2014-4223 — Oracle JDK vulnerability

15 documents7 sources
Severity
9.3CRITICALNVD
EPSS
5.4%
top 9.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Debian LinuxOracle JDKOracle JRE+2 more
Timeline
PublishedJul 17
Latest updateMay 13

Description

Unspecified vulnerability in Oracle Java SE 7u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-2483.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDoracle/jdk1.7.0
▶NVDoracle/jre1.7.0
▶NVDoracle/openjdk1.7.0

Also affects: Debian Linux 7.0, Enterprise Linux 5, 6.0, 7.0

🔴Vulnerability Details

7
GHSA
GHSA-9pmr-9fpq-fq64: Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, int↗2022-05-13
▶
GHSA
GHSA-x77f-3hr5-3569: Unspecified vulnerability in Oracle Java SE 7u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors re↗2022-05-13
▶
OSV
openjdk-7 update↗2014-09-17
▶
OSV
openjdk-7 regression↗2014-08-26
▶
OSV
openjdk-7 vulnerabilities↗2014-08-20
▶

📋Vendor Advisories

5
Ubuntu
OpenJDK 7 update↗2014-09-17
▶
Ubuntu
OpenJDK 7 regression↗2014-08-26
▶
Ubuntu
OpenJDK 7 vulnerabilities↗2014-08-20
▶
Red Hat
OpenJDK: Restrict use of privileged annotations (Libraries, 8034985)↗2014-07-15
▶
Red Hat
OpenJDK: Incorrect handling of invocations with exhausted ranks (Libraries, 8035793)↗2014-07-15
▶

💬Community

1
Bugzilla
CVE-2014-4223 OpenJDK: Incorrect handling of invocations with exhausted ranks (Libraries, 8035793)↗2014-07-15
▶
CVE-2014-4223 — Oracle JDK vulnerability | cvebase