CVE-2015-2659 — NULL Pointer Dereference in Oracle JDK

CWE-476 — NULL Pointer Dereference6 documents6 sources

Severity

5.0MEDIUMNVD

EPSS

1.1%

top 21.85%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle JDK Oracle JRE

Timeline

PublishedJul 16

Latest updateMay 13

Description

Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related to Security.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDoracle/jdk1.8.0

▶NVDoracle/jre1.8.0

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-6gx2-w3xx-j348: Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related↗2022-05-13

▶

CVEList

CVE-2015-2659: Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related↗2015-07-16

▶

📋Vendor Advisories

Red Hat

OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)↗2015-07-14

▶

Debian

CVE-2015-2659: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allow...↗2015

▶

💬Community

Bugzilla

CVE-2015-2659 OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)↗2015-07-11

▶