CVE-2014-6512 — Insufficient Verification of Data Authenticity in Oracle JDK

CWE-345 — Insufficient Verification of Data Authenticity12 documents9 sources

Severity

4.3MEDIUMNVD

OSV4.0

EPSS

4.2%

top 11.26%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle JDK Oracle JRE Oracle Jrockit

Timeline

PublishedOct 15

Latest updateMay 13

Description

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶NVDoracle/jrockitr27.8.3, r28.3.3+1

▶NVDoracle/jdk4 versions+3

▶NVDoracle/jre4 versions+3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-hrpq-wp36-q3q3: Unspecified vulnerability in Oracle Java SE 5↗2022-05-13

▶

OSV

openjdk-7 vulnerabilities↗2014-10-23

▶

OSV

CVE-2014-6512: Unspecified vulnerability in Oracle Java SE 5↗2014-10-15

▶

CVEList

CVE-2014-6512: Unspecified vulnerability in Oracle Java SE 5↗2014-10-15

▶

💥Exploits & PoCs

Exploit-DB

FreiChat 9.6 - SQL Injection↗2015-07-13

▶

📋Vendor Advisories

Ubuntu

OpenJDK 7 vulnerabilities↗2014-10-23

▶

Ubuntu

OpenJDK 7 vulnerabilities↗2014-10-23

▶

Ubuntu

OpenJDK 6 vulnerabilities↗2014-10-17

▶

Red Hat

OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)↗2014-10-14

▶

Debian

CVE-2014-6512: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java S...↗2014

▶

💬Community

Bugzilla

CVE-2014-6512 OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)↗2014-02-28

▶