Vulnerability Description
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical | Ubuntu Linux | 10.04 |
| Oracle | Jdk | 1.7.0 |
| Oracle | Jre | 1.7.0 |
| Debian | Debian Linux | 6.0 |
References
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue TrackingMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
- http://secunia.com/advisories/58415Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
- http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
- http://www.debian.org/security/2014/dsa-2912Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
- http://www.securityfocus.com/bid/66893Third Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2191-1Third Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue TrackingMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
FAQ
What is CVE-2014-2397?
CVE-2014-2397 is a vulnerability with a CVSS score of 9.3 (HIGH). Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot...
How severe is CVE-2014-2397?
CVE-2014-2397 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-2397?
Check the references section above for vendor advisories and patch information. Affected products include: Canonical Ubuntu Linux, Oracle Jdk, Oracle Jre, Debian Debian Linux.