CVE-2015-0437 — Oracle JDK vulnerability

6 documents6 sources
Severity
9.3CRITICALNVD
EPSS
1.2%
top 20.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Novell Suse Linux Enterprise DesktopOracle JDKOracle JRE
Timeline
PublishedJan 21
Latest updateMay 13

Description

Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDoracle/jdk1.8.0
▶NVDoracle/jre1.8.0

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-gj79-mmh9-3f7f: Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors re↗2022-05-13
▶
CVEList
CVE-2015-0437: Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors re↗2015-01-21
▶

📋Vendor Advisories

2
Red Hat
OpenJDK: code generation issue (Hotspot, 8064524)↗2015-01-20
▶
Debian
CVE-2015-0437: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affe...↗2015
▶

💬Community

1
Bugzilla
CVE-2015-0437 OpenJDK: code generation issue (Hotspot, 8064524)↗2015-01-19
▶
CVE-2015-0437 — Oracle JDK vulnerability | cvebase