Vulnerability Description
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical | Ubuntu Linux | 10.04 |
| Oracle | Jrockit | r27.8.1 |
| Juniper | Junos Space | < 15.1 |
| Oracle | Jdk | 1.5.0 |
| Oracle | Jre | 1.5.0 |
| Debian | Debian Linux | 6.0 |
| Ibm | Forms Viewer | >= 4.0.0, < 4.0.0.3 |
| Microsoft | Windows | - |
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698Third Party Advisory
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue TrackingMailing ListThird Party Advisory
- http://marc.info/?l=bugtraq&m=140852974709252&w=2Issue TrackingMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
- http://secunia.com/advisories/58415Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
- http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
- http://www.debian.org/security/2014/dsa-2912Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
- http://www.securityfocus.com/bid/66877Third Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2191-1Third Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory
FAQ
What is CVE-2014-0456?
CVE-2014-0456 is a vulnerability with a CVSS score of 10.0 (HIGH). Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ...
How severe is CVE-2014-0456?
CVE-2014-0456 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-0456?
Check the references section above for vendor advisories and patch information. Affected products include: Canonical Ubuntu Linux, Oracle Jrockit, Juniper Junos Space, Oracle Jdk, Oracle Jre.