CVE-2015-2632 — Integer Overflow or Wraparound

Vendor	Product	Version range	Fixed in
debian	icu	< icu 55.1-7 (bookworm)	icu 55.1-7 (bookworm)
debian	openjdk-8	< icu 55.1-7 (bookworm)	icu 55.1-7 (bookworm)
oracle	jdk	—	—
oracle	jdk	—	—
oracle	jdk	—	—
oracle	jre	—	—
oracle	jre	—	—
oracle	jre	—	—

GHSA

GHSA-cf3m-hfmx-8m8q: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D

ghsa_unreviewed·2022-05-13

CVE-2015-2632 [MEDIUM] GHSA-cf3m-hfmx-8m8q: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

OSV

icu vulnerabilities

osv·2015-09-16·CVSS 6.8

CVE-2015-1270 [MEDIUM] icu vulnerabilities icu vulnerabilities Atte Kettunen discovered that ICU incorrectly handled certain converter names. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash. (CVE-2015-1270) It was discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program. (CVE-2015-2632, CVE-2015-4760)

OSV

openjdk-7 vulnerabilities

osv·2015-07-30·CVSS 9.8

CVE-2015-2590 [CRITICAL] openjdk-7 vulnerabilities openjdk-7 vulnerabilities Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2015-2590, CVE-2015-2628, CVE-2015-4731, CVE-2015-4732, CVE-2015-4733, CVE-2015-4760, CVE-2015-4748) Several vulnerabilities were discovered in the cryptographic components of the OpenJDK JRE. An attacker could exploit these to expose sensitive data over the network. (CVE-2015-2601, CVE-2015-2808, CVE-2015-4000, CVE-2015-2625, CVE-2015-2613) As a security improvement, this update modifies OpenJDK behavior to disable RC4 TLS/SSL cipher suites by default. As a security improvement, this update modifies OpenJDK behavior to reject

OSV

CVE-2015-2632: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D

osv·2015-07-16·CVSS 5.0

CVE-2015-2632 [MEDIUM] CVE-2015-2632: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

Ubuntu

ICU vulnerabilities

vendor_ubuntu·2015-09-16·CVSS 6.8

CVE-2015-1270 [MEDIUM] ICU vulnerabilities Title: ICU vulnerabilities Summary: Several security issues were fixed in ICU. Atte Kettunen discovered that ICU incorrectly handled certain converter names. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash. (CVE-2015-1270) It was discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program. (CVE-2015-2632, CVE-2015-4760) Instructions: In general, a standard system update will make all the necessary changes.

Ubuntu

OpenJDK 6 vulnerabilities

vendor_ubuntu·2015-08-06·CVSS 9.8

CVE-2015-2590 [CRITICAL] OpenJDK 6 vulnerabilities Title: OpenJDK 6 vulnerabilities Summary: Several security issues were fixed in OpenJDK 6. Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2015-2590, CVE-2015-2628, CVE-2015-4731, CVE-2015-4732, CVE-2015-4733, CVE-2015-4760, CVE-2015-4748) Several vulnerabilities were discovered in the cryptographic components of the OpenJDK JRE. An attacker could exploit these to expose sensitive data over the network. (CVE-2015-2601, CVE-2015-2808, CVE-2015-4000, CVE-2015-2625, CVE-2015-2613) As a security improvement, this update modifies OpenJDK behavior to disable RC4 TLS/SSL cipher suites by default. As a secu

Ubuntu

OpenJDK 7 vulnerabilities

vendor_ubuntu·2015-07-30·CVSS 9.8

CVE-2015-2808 [CRITICAL] OpenJDK 7 vulnerabilities Title: OpenJDK 7 vulnerabilities Summary: Several security issues were fixed in OpenJDK 7. Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2015-2590, CVE-2015-2628, CVE-2015-4731, CVE-2015-4732, CVE-2015-4733, CVE-2015-4760, CVE-2015-4748) Several vulnerabilities were discovered in the cryptographic components of the OpenJDK JRE. An attacker could exploit these to expose sensitive data over the network. (CVE-2015-2601, CVE-2015-2808, CVE-2015-4000, CVE-2015-2625, CVE-2015-2613) As a security improvement, this update modifies OpenJDK behavior to disable RC4 TLS/SSL cipher suites by default. As a secu

Ubuntu

OpenJDK 7 vulnerabilities

vendor_ubuntu·2015-07-30·CVSS 9.8

CVE-2015-2613 [CRITICAL] OpenJDK 7 vulnerabilities Title: OpenJDK 7 vulnerabilities Summary: openjdk-7 vulnerabilities Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2015-2590, CVE-2015-2628, CVE-2015-4731, CVE-2015-4732, CVE-2015-4733, CVE-2015-4760, CVE-2015-4748) Several vulnerabilities were discovered in the cryptographic components of the OpenJDK JRE. An attacker could exploit these to expose sensitive data over the network. (CVE-2015-2601, CVE-2015-2808, CVE-2015-4000, CVE-2015-2625, CVE-2015-2613) As a security improvement, this update modifies OpenJDK behavior to disable RC4 TLS/SSL cipher suites by default. As a security improvement, this

Red Hat

ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)

vendor_redhat·2015-07-14·CVSS 5.0

CVE-2015-2632 [MEDIUM] CWE-190 ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520) ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520) Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D. An information leak flaw was found in the 2D component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions. Package: icu (Red Hat Enterprise Linux 5) - Not affected Package: icu (Red Hat Enterprise Linux 6) - Not affected Package: icu (Red Hat Enterprise Linux 7) - Will not fix

Debian

CVE-2015-2632: icu - Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote a...

vendor_debian·2015·CVSS 5.0

CVE-2015-2632 [MEDIUM] CVE-2015-2632: icu - Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote a... Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D. Scope: local bookworm: resolved (fixed in 55.1-7) bullseye: resolved (fixed in 55.1-7) forky: resolved (fixed in 55.1-7) sid: resolved (fixed in 55.1-7) trixie: resolved (fixed in 55.1-7)

CVE-2015-2632: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

Affected

CVSS provenance